Design/Logic Flaw

2023-08-0312:15:00

PRIOn knowledge base

www.prio-n.com

brute-force protection

codesys development system

local attacker

import dialog

4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.

CPENameOperatorVersion
development_systemlt3.5.19.20

CPE	Name	Operator	Version
	development_system	lt	3.5.19.20

References

cert.vde.com/en/advisories/VDE-2023-023