CVE-2021-36763: High severity codesys control for beaglebone sl vulnerability
Published Aug 3, 2021
·Updated
In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.
Affected Software
16 affected components
CODESYS Control Beaglebone Sl<4.2.0.0
CODESYS Control Empc-a\/imx6 Sl<4.2.0.0
CODESYS Control Iot2000 Sl<4.2.0.0
CODESYS Control Linux Sl<=4.2.0.0
CODESYS Control Pfc100 Sl<4.2.0.0
CODESYS Control Pfc200 Sl<4.2.0.0
CODESYS Control Plcnext Sl<4.2.0.0
CODESYS Control Raspberry Pi Sl<4.2.0.0
CODESYS Control Wago Touch Panels 600 Sl<4.2.0.0
CODESYS Control Rte<3.5.17.10
CODESYS Control Rte Beckhoff Cx<3.5.17.10
CODESYS Control Runtime System Toolkit<3.5.17.10
CODESYS Control Win Sl<3.5.17.10
CODESYS Embedded Target Visu Toolkit<3.5.17.10
CODESYS HMI<3.5.17.10
CODESYS Remote Target Visu Toolkit<3.5.17.10
Event History
Aug 3, 2021
CVE Published
via MITRE·03:49 PM
Data Sourced
via MITRE·03:49 PM
Description
Frequently Asked Questions
1
What is CVE-2021-36763?
CVE-2021-36763 is a vulnerability in CODESYS V3 web server that allows External Parties to access files or directories.
2
What is the severity of CVE-2021-36763?
The severity of CVE-2021-36763 is high, with a severity value of 7.5.
3
Which software is affected by the CVE-2021-36763 vulnerability?
The CVE-2021-36763 vulnerability affects CODESYS Control, CODESYS Control Rte, CODESYS Control Runtime System Toolkit, CODESYS Control Win Sl, Codesys Embedded Target Visu Toolkit, Codesys Hmi, and Codesys Remote Target Visu Toolkit.
4
How can External Parties access files or directories in CODESYS V3 web server?
External Parties can access files or directories in CODESYS V3 web server due to the vulnerability in versions before 3.5.17.10.
5
How can I fix CVE-2021-36763?
To fix CVE-2021-36763, update CODESYS V3 web server to version 3.5.17.10 or later.