CVE-2023-3663: Codesys Development System

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server.

Affected products

• Codesys Development System: from 3.5.11.20, before 3.5.19.20 (fixed in 3.5.19.20)

Published 2023-08-03. Last modified 2026-06-17.