CVE-2023-37551

Summary

CVE-2023-37551 is a vulnerability affecting multiple versions of Codesys products. Successfully authenticated users can exploit this flaw to download files with any file extension using the CmpApp component, bypassing regular file download filters. This poses a significant risk as the malicious files could compromise the integrity of the CODESYS control runtime system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.