Lucene search
HistoryMay 06, 2024 - 12:15 p.m.
CVE-2023-49675
unauthenticated attacker
project files
arbitrary code
system crash
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.7%
An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability.
References
Related
cve
cve
CVE-2023-49675
2024-05-06 12:15:07
cvelist
cvelist
CVE-2023-49675 CODESYS: Out-of-bounds write through corrupted project files
2024-05-06 11:09:17
vulnrichment
vulnrichment
CVE-2023-49675 CODESYS: Out-of-bounds write through corrupted project files
2024-05-06 11:09:17
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
21.7%
Related for NVD:CVE-2023-49675