漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
CODESYS runtime system prone to file deletion due to improper error handling
Vulnerability Description
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Type
对异常条件的处理不恰当
Vulnerability Title
CODESYS 安全漏洞
Vulnerability Description
CODESYS是德国3S-Smart Software Solutions的一套控制器开发系统 CODESYS 多个产品存在安全漏洞,该漏洞源于实施了不正确的错误处理。低权限的远程攻击者利用该漏洞可能会制作一个请求,该请求没有被错误处理正确处理。 因此,请求引用的文件可能会被删除。
CVSS Information
N/A
Vulnerability Type
N/A