CVE-2021-36763

CWE-552 — Files Accessible to External Parties3 documents3 sources
Severity
7.5HIGH
EPSS
0.2%
top 53.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
7
Codesys ControlCodesys Control RTECodesys Control Runtime System Toolkit+4 more
Timeline
PublishedAug 3
Latest updateMay 24

Description

In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages7 packages

▶NVDcodesys/hmi< 3.5.17.10
▶NVDcodesys/control< 4.2.0.0+1
▶NVDcodesys/control_rte< 3.5.17.10
▶NVDcodesys/control_win_sl< 3.5.17.10

🔴Vulnerability Details

2
GHSA
GHSA-w4jx-jw2g-xvqv: In CODESYS V3 web server before 3↗2022-05-24
▶
CVEList
CVE-2021-36763: In CODESYS V3 web server before 3↗2021-08-03
▶
CVE-2021-36763 (HIGH CVSS 7.5) | In CODESYS V3 web server before 3.5 | cvebase.io