CVE-2021-36763

published 2021-08-03

CVE-2021-36763: In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
codesys	control	< 4.2.0.0	4.2.0.0
codesys	control	<= 4.2.0.0	—
codesys	control_rte	< 3.5.17.10	3.5.17.10
codesys	control_runtime_system_toolkit	< 3.5.17.10	3.5.17.10
codesys	control_win_sl	< 3.5.17.10	3.5.17.10
codesys	embedded_target_visu_toolkit	< 3.5.17.10	3.5.17.10
codesys	hmi	< 3.5.17.10	3.5.17.10
codesys	remote_target_visu_toolkit	< 3.5.17.10	3.5.17.10

CWE-552