Insecure Package Installation in CODESYS Development System 3

Insecure Package Installation in CODESYS Development System 3

CVE-2021-29240 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.

Learn more about our Web Application Penetration Testing UK.