CVE-2019-13532

2019-09-1316:58:21

CWE-22

icscert

www.cve.org

8 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.2%

JSON

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.

CNA Affected

[
  {
    "product": "CODESYS V3 web server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions prior to 3.5.14.10"
      }
    ]
  }
]

References

www.us-cert.gov/ics/advisories/icsa-19-255-01