Codesys Development System v2.3 vulnerabilities

2 CVEs affecting Codesys Development System v2.3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-49676, published 2024-05-06.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-49675, published 2024-05-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability.
• CVE-2023-49676, published 2024-05-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability.