Vulnerabilities > CVE-2021-36763 - Files or Directories Accessible to External Parties vulnerability in Codesys products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

codesys

CWE-552

NVD

Published: 2021-08-03

Updated: 2021-08-17

Summary

In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

Vulnerable Configurations

Part	Description	Count
Application	Codesys Codesys Control WIN SL 3.0 Codesys Control WIN SL 3.5.9.80 Codesys Control WIN SL 3.5.10.0 Codesys Control WIN SL 3.5.10.10 Codesys Control WIN SL 3.5.10.20 Codesys Control WIN SL 3.5.10.30 Codesys Control WIN SL 3.5.10.40 Codesys Control WIN SL 3.5.10.50 Codesys Control WIN SL 3.5.10.60 Codesys Control WIN SL 3.5.10.70 Codesys Control WIN SL 3.5.11.0 Codesys Control WIN SL 3.5.11.10 Codesys Control WIN SL 3.5.11.20 Codesys Control WIN SL 3.5.11.30 Codesys Control WIN SL 3.5.11.40 Codesys Control WIN SL 3.5.11.50 Codesys Control WIN SL 3.5.11.60 Codesys Control WIN SL 3.5.12.0 Codesys Control WIN SL 3.5.12.10 Codesys Control WIN SL 3.5.12.20 Codesys Control WIN SL 3.5.12.30 Codesys Control WIN SL 3.5.12.40 Codesys Control WIN SL 3.5.12.50 Codesys Control WIN SL 3.5.12.60 Codesys Control WIN SL 3.5.12.70 Codesys Control WIN SL 3.5.13.0 Codesys Control WIN SL 3.5.13.10 Codesys Control WIN SL 3.5.13.20 Codesys Control WIN SL 3.5.13.30 Codesys Control WIN SL 3.5.13.40 Codesys Control WIN SL 3.5.14.0 Codesys Control WIN SL 3.5.14.10 Codesys Control WIN SL 3.5.14.20 Codesys Control WIN SL 3.5.14.30 Codesys Control WIN SL 3.5.14.40 Codesys Control WIN SL 3.5.15.0 Codesys Control WIN SL 3.5.15.10 Codesys Control WIN SL 3.5.15.20 Codesys Control WIN SL 3.5.15.30 Codesys Control WIN SL 3.5.15.40 Codesys Control WIN SL 3.5.15.50 Codesys Control WIN SL 3.5.16.0 Codesys Control WIN SL 3.5.16.10 Codesys Control WIN SL 3.5.16.20 Codesys Control WIN SL 3.5.16.30 Codesys Control WIN SL 3.5.16.40 Codesys Control Runtime System Toolkit - Codesys Control Runtime System Toolkit 3.0 Codesys Control Runtime System Toolkit 3.5.12.80 Codesys Control Runtime System Toolkit 3.5.15.20 Codesys Control Runtime System Toolkit 3.5.15.30 Codesys Control Runtime System Toolkit 3.5.15.40 Codesys Control Runtime System Toolkit 3.5.16.0 Codesys Control Runtime System Toolkit 3.5.16.10 Codesys Control Runtime System Toolkit 3.5.16.70 Codesys Control Runtime System Toolkit 3.5.17.0 Codesys Embedded Target Visu Toolkit 3.0 Codesys Embedded Target Visu Toolkit 3.5.12.30 Codesys Embedded Target Visu Toolkit 3.5.12.80 Codesys Embedded Target Visu Toolkit 3.5.15.20 Codesys Embedded Target Visu Toolkit 3.5.15.40 Codesys Embedded Target Visu Toolkit 3.5.16.10 Codesys Embedded Target Visu Toolkit 3.5.17.0 Codesys HMI - Codesys HMI 3.0 Codesys HMI 3.5.10.0 Codesys HMI 3.5.10.10 Codesys HMI 3.5.10.20 Codesys HMI 3.5.10.30 Codesys HMI 3.5.10.30. Codesys HMI 3.5.10.40 Codesys HMI 3.5.10.50 Codesys HMI 3.5.10.60 Codesys HMI 3.5.10.70 Codesys HMI 3.5.11.0 Codesys HMI 3.5.11.10 Codesys HMI 3.5.11.20 Codesys HMI 3.5.11.30 Codesys HMI 3.5.11.40 Codesys HMI 3.5.11.50 Codesys HMI 3.5.11.60 Codesys HMI 3.5.12.0 Codesys HMI 3.5.12.10 Codesys HMI 3.5.12.20 Codesys HMI 3.5.12.30 Codesys HMI 3.5.12.40 Codesys HMI 3.5.12.50 Codesys HMI 3.5.12.70 Codesys HMI 3.5.12.80 Codesys HMI 3.5.13.0 Codesys HMI 3.5.13.10 Codesys HMI 3.5.13.20 Codesys HMI 3.5.13.30 Codesys HMI 3.5.13.40 Codesys HMI 3.5.14.0 Codesys HMI 3.5.14.10 Codesys HMI 3.5.14.20 Codesys HMI 3.5.14.30 Codesys HMI 3.5.14.40 Codesys HMI 3.5.15.0 Codesys HMI 3.5.15.20 Codesys HMI 3.5.15.30 Codesys HMI 3.5.15.40 Codesys HMI 3.5.16.0 Codesys HMI 3.5.16.10 Codesys HMI 3.5.17.0 Codesys Remote Target Visu Toolkit 3.0 Codesys Remote Target Visu Toolkit 3.5.12.30 Codesys Remote Target Visu Toolkit 3.5.12.80 Codesys Remote Target Visu Toolkit 3.5.15.20 Codesys Remote Target Visu Toolkit 3.5.15.40 Codesys Remote Target Visu Toolkit 3.5.16.10 Codesys Remote Target Visu Toolkit 3.5.17.0 Codesys Control RTE - Codesys Control RTE 3.5.8.60 Codesys Control RTE 3.5.16.10 Codesys Control RTE 3.0 Codesys Control RTE 3.5.15.30 Codesys Control RTE 3.5.17.0 Codesys Control *	131

Common Weakness Enumeration (CWE)

CWE-552 - Files or Directories Accessible to External Parties

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16803&token=0b8edf9276dc39ee52f43026c415c5b38085d90a&download=