CVE-2023-5751: Codesys Control Win Sl

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere. 

Affected products

• Codesys Codesys Control Win Sl: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Codesys Development System v3: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Codesys Edge Gateway For Windows: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Codesys Gateway For Windows: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Codesys HMI Sl: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Control Win Sl: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Development System v3: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Edge Gateway: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys Gateway: before 3.5.20.10 (fixed in 3.5.20.10)
• Codesys HMI Sl: before 3.5.20.10 (fixed in 3.5.20.10)

Published 2024-06-04. Last modified 2026-06-17.