CVE-2023-3669: Codesys Development System

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.

Affected products

• Codesys Development System: before 3.5.19.20 (fixed in 3.5.19.20)

Published 2023-08-03. Last modified 2026-06-17.