CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

Several New Critical Flaws Affect CODESYS Industrial Automation Software

Cybersecurity researchers on Wednesday disclosed multiple security vulnerabilities impacting CODESYS automation software and the WAGO programmable logic controller PLC platform that could be remotely exploited to take control of a company's cloud operational technology OT infrastructure. The flaw...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29238

CVE-2021-29238 affects CODESYS Automation Server prior to version 1.16.0. The flaw is a cross-site request forgery (CSRF) vulnerability that can allow an attacker to perform authenticated actions on behalf of a user; in wild exposures the THN report describes scenarios leading to elevated privile...