CVE-2023-6357

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
codesyscontrol_for_beaglebone_sl
𝑥
< 4.11.0.0
codesyscontrol_for_empc-a\/imx6
𝑥
< 4.11.0.0
codesyscontrol_for_iot2000_sl
𝑥
< 4.11.0.0
codesyscontrol_for_linux_arm_sl
𝑥
< 4.11.0.0
codesyscontrol_for_linux_sl
𝑥
< 4.11.0.0
codesyscontrol_for_pfc100_sl
𝑥
< 4.11.0.0
codesyscontrol_for_pfc200_sl
𝑥
< 4.11.0.0
codesyscontrol_for_plcnext_sl
𝑥
< 4.11.0.0
codesyscontrol_for_raspberry_pi_sl
𝑥
< 4.11.0.0
codesyscontrol_for_wago_touch_panels_600_sl
𝑥
< 4.11.0.0
codesysruntime_toolkit
𝑥
< 3.5.19.50
𝑥
= Vulnerable software versions