Back to Database
Status published
High
CVE-2023-5751
CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
Vulnerability Description
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-5751
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- joker63
References
More from CODESYS
View All →CVE-2025-41739
CODESYS Control - Linux/QNX SysSocket flaw
Medium
5.9
CVE-2025-41738
CODESYS Control - Invalid type usage in visualization
High
7.5
CVE-2025-41700
CODESYS Development System - Deserialization of Untrusted Data
High
7.8
CVE-2025-41691
CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
High
7.5
CVE-2025-41660
CODESYS Control Boot Application Replacement Enables Code Execution
High
8.8
Affected Vendor
CODESYS
View all reports →Affected Software
CODESYS Control Win (SL), CODESYS Development System V3, CODESYS Edge Gateway for Windows, CODESYS Gateway for Windows, CODESYS HMI (SL)
Vulnerable Versions:
0
Timeline
Official Publish:
June 4th, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H