| Package | Affected versions | Patched versions |
|---|---|---|
| codesys | < 3.5.21.40 | 3.5.21.40 |
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free