CVE-2021-21869: High severity codesys development system vulnerability
Published Aug 25, 2021
·Updated
An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
2 affected components
CODESYS CODESYS=3.5.16.0
CODESYS CODESYS=3.5.17.0
Remediation
Event History
Aug 25, 2021
CVE Published
via MITRE·06:16 PM
Data Sourced
via MITRE·06:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-21869?
CVE-2021-21869 has a critical severity level due to its potential for arbitrary command execution.
2
How do I fix CVE-2021-21869?
To fix CVE-2021-21869, upgrade CODESYS Development System to version 3.5.18 or later.
3
What software versions are affected by CVE-2021-21869?
CVE-2021-21869 affects CODESYS Development System versions 3.5.16.0 and 3.5.17.0.
4
What type of vulnerability is CVE-2021-21869?
CVE-2021-21869 is classified as an unsafe deserialization vulnerability.
5
What are the consequences of exploiting CVE-2021-21869?
Exploitation of CVE-2021-21869 can lead to arbitrary command execution on the affected system.