A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Se presenta una vulnerabilidad de deserialización no segura en la funcionalidad PackageManagement.plugin ExtensionMethods.Clone() de CODESYS GmbH CODESYS Development System versión 3.5.16. Un archivo especialmente diseñado puede conllevar a una ejecución arbitraria de comandos. Un atacante puede proporcionar un archivo malicioso para desencadenar esta vulnerabilidad
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | REQUIRED |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
AV:N/AC:M/Au:N/C:P/I:P/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | PARTIAL |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-502
|
| [email protected] | Primary |
en
CWE-502
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| codesys | development_system | 3.5.16.0 | <built-in method update of dict object at 0x7e60ba9bdb40> | Application |
| codesys | development_system | 3.5.17.0 | <built-in method update of dict object at 0x7e60a8a57400> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:codesys:development_system:3.5.16.0:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:codesys:development_system:3.5.17.0:*:*:*:*:*:*:* |