CVE-2021-21863

🗓️ 05 Aug 2021 20:00:34Reported by talosType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 46 Views

- Unsafe deserialization vulnerability in CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17 allows arbitrary command execution via specially crafted files

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-21863	17 Mar 202612:00	–	circl
CNNVD	3s-smart Software Solutions CODESYS Development System 代码问题漏洞	26 Jul 202100:00	–	cnnvd
Cvelist	CVE-2021-21863	5 Aug 202120:00	–	cvelist
EUVD	EUVD-2021-9034	3 Oct 202520:07	–	euvd
NVD	CVE-2021-21863	5 Aug 202120:15	–	nvd
Prion	Deserialization of untrusted data	5 Aug 202120:15	–	prion
Positive Technologies	PT-2021-7779 · 3S Smart Software Solutions · Codesys Development System	5 Aug 202100:00	–	ptsecurity
RedhatCVE	CVE-2021-21863	22 May 202518:19	–	redhatcve
Talos	CODESYS Development System ComponentModel Profile.FromFile() Unsafe Deserialization vulnerability	26 Jul 202100:00	–	talos

NVD

Vulners

Node

codesys development_systemMatch3.5.16.0

codesys development_systemMatch3.5.17.0

[
  {
    "product": "CODESYS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "CODESYS GmbH CODESYS Development System 3.5.16 ,CODESYS GmbH CODESYS Development System 3.5.17"
      }
    ]
  }
]