CVE-2023-6357

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Dec 5, 2023
Updated: Dec 11, 2023
CWE ID 78

Summary

CVE-2023-6357 is a recently disclosed vulnerability that allows a low-privileged remote attacker to manipulate file system libraries. By injecting additional system commands, the attacker can potentially gain full control of the affected device. This vulnerability poses a significant risk as it can be exploited remotely, making it essential for organizations to apply patches as soon as possible to protect against potential attacks. The exploitation of this vulnerability could result in unauthorized access, data theft, or system compromise. Organizations are advised to prioritize updates to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • CODESYS Control for BeagleBone SL
  • CODESYS Control for IOT2000 SL
  • CODESYS Control for emPC-A/iMX6
  • CODESYS Control for PFC200 SL
  • CODESYS Control for Raspberry Pi SL

Affected Vendors

  • Codesys

Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future

Note: This is just a basic overview providing quick insights into CVE-2023-6357 information. Gain full access to comprehensive CVE data, third party vulnerabilities, compromised credentials and more with Recorded Future
  • Gain complete coverage of your cyber, third party, and physical attack surface
  • Proactively mitigate threats before they turn into costly attacks
  • Make fast, effective, data-driven decisions