Vulnerabilities > CVE-2021-36763 - Files or Directories Accessible to External Parties vulnerability in Codesys products

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

codesys

CWE-552

NVD

Published: 2021-08-03

Updated: 2021-08-17

Summary

In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

Vulnerable Configurations

Part	Description	Count
Application	Codesys Codesys Control * Codesys Control RTE - Codesys Control RTE 3.5.8.60 Codesys Control RTE 3.5.16.10 Codesys Control RTE 3.0 Codesys Control RTE 3.5.15.30 Codesys Control RTE 3.5.17.0 Codesys Control WIN SL 3.0 Codesys Control WIN SL 3.5.9.80 Codesys Control WIN SL 3.5.10.0 Codesys Control WIN SL 3.5.10.10 Codesys Control WIN SL 3.5.10.20 Codesys Control WIN SL 3.5.10.30 Codesys Control WIN SL 3.5.10.40 Codesys Control WIN SL 3.5.10.50 Codesys Control WIN SL 3.5.10.60 Codesys Control WIN SL 3.5.10.70 Codesys Control WIN SL 3.5.11.0 Codesys Control WIN SL 3.5.11.10 Codesys Control WIN SL 3.5.11.20 Codesys Control WIN SL 3.5.11.30 Codesys Control WIN SL 3.5.11.40 Codesys Control WIN SL 3.5.11.50 Codesys Control WIN SL 3.5.11.60 Codesys Control WIN SL 3.5.12.0 Codesys Control WIN SL 3.5.12.10 Codesys Control WIN SL 3.5.12.20 Codesys Control WIN SL 3.5.12.30 Codesys Control WIN SL 3.5.12.40 Codesys Control WIN SL 3.5.12.50 Codesys Control WIN SL 3.5.12.60 Codesys Control WIN SL 3.5.12.70 Codesys Control WIN SL 3.5.13.0 Codesys Control WIN SL 3.5.13.10 Codesys Control WIN SL 3.5.13.20 Codesys Control WIN SL 3.5.13.30 Codesys Control WIN SL 3.5.13.40 Codesys Control WIN SL 3.5.14.0 Codesys Control WIN SL 3.5.14.10 Codesys Control WIN SL 3.5.14.20 Codesys Control WIN SL 3.5.14.30 Codesys Control WIN SL 3.5.14.40 Codesys Control WIN SL 3.5.15.0 Codesys Control WIN SL 3.5.15.10 Codesys Control WIN SL 3.5.15.20 Codesys Control WIN SL 3.5.15.30 Codesys Control WIN SL 3.5.15.40 Codesys Control WIN SL 3.5.15.50 Codesys Control WIN SL 3.5.16.0 Codesys Control WIN SL 3.5.16.10 Codesys Control WIN SL 3.5.16.20 Codesys Control WIN SL 3.5.16.30 Codesys Control WIN SL 3.5.16.40 Codesys Control Runtime System Toolkit - Codesys Control Runtime System Toolkit 3.0 Codesys Control Runtime System Toolkit 3.5.12.80 Codesys Control Runtime System Toolkit 3.5.15.20 Codesys Control Runtime System Toolkit 3.5.15.30 Codesys Control Runtime System Toolkit 3.5.15.40 Codesys Control Runtime System Toolkit 3.5.16.0 Codesys Control Runtime System Toolkit 3.5.16.10 Codesys Control Runtime System Toolkit 3.5.17.0 Codesys Embedded Target Visu Toolkit 3.0 Codesys Embedded Target Visu Toolkit 3.5.12.80 Codesys Embedded Target Visu Toolkit 3.5.15.20 Codesys Embedded Target Visu Toolkit 3.5.15.40 Codesys Embedded Target Visu Toolkit 3.5.16.10 Codesys Embedded Target Visu Toolkit 3.5.17.0 Codesys HMI - Codesys HMI 3.0 Codesys HMI 3.5.10.0 Codesys HMI 3.5.10.10 Codesys HMI 3.5.10.20 Codesys HMI 3.5.10.30 Codesys HMI 3.5.10.30. Codesys HMI 3.5.10.40 Codesys HMI 3.5.10.50 Codesys HMI 3.5.10.60 Codesys HMI 3.5.10.70 Codesys HMI 3.5.11.0 Codesys HMI 3.5.11.10 Codesys HMI 3.5.11.20 Codesys HMI 3.5.11.30 Codesys HMI 3.5.11.40 Codesys HMI 3.5.11.50 Codesys HMI 3.5.11.60 Codesys HMI 3.5.12.0 Codesys HMI 3.5.12.10 Codesys HMI 3.5.12.20 Codesys HMI 3.5.12.30 Codesys HMI 3.5.12.40 Codesys HMI 3.5.12.50 Codesys HMI 3.5.12.70 Codesys HMI 3.5.12.80 Codesys HMI 3.5.13.0 Codesys HMI 3.5.13.10 Codesys HMI 3.5.13.20 Codesys HMI 3.5.13.30 Codesys HMI 3.5.13.40 Codesys HMI 3.5.14.0 Codesys HMI 3.5.14.10 Codesys HMI 3.5.14.20 Codesys HMI 3.5.14.30 Codesys HMI 3.5.14.40 Codesys HMI 3.5.15.0 Codesys HMI 3.5.15.20 Codesys HMI 3.5.15.30 Codesys HMI 3.5.15.40 Codesys HMI 3.5.16.0 Codesys HMI 3.5.16.10 Codesys HMI 3.5.17.0 Codesys Remote Target Visu Toolkit 3.0 Codesys Remote Target Visu Toolkit 3.5.12.80 Codesys Remote Target Visu Toolkit 3.5.15.20 Codesys Remote Target Visu Toolkit 3.5.15.40 Codesys Remote Target Visu Toolkit 3.5.16.10 Codesys Remote Target Visu Toolkit 3.5.17.0	128

Common Weakness Enumeration (CWE)

CWE-552 - Files or Directories Accessible to External Parties

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16803&token=0b8edf9276dc39ee52f43026c415c5b38085d90a&download=