← Vulnerability feed

Vulnerability record · CVE-2023-6357 · published 5 December 2023

CVE-2023-6357: Codesys control for beaglebone sl os command injection vulnerability

Codesys · Control For Beaglebone Sl

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

8.8 CVSS 3.1 High EPSS 0.96% · top 40.0% CWE-78 · OS command injection
8.8CVSS 3.1 base score
0.96%EPSS exploitation probability, 30 days
NoNot in CISA KEV
11Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

11 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://https://cert.vde.com/en/advisories/VDE-2023-066 Broken Link
https://cert.vde.com/en/advisories/VDE-2023-066 MitigationThird Party Advisory
https://https://cert.vde.com/en/advisories/VDE-2023-066 Broken Link

Track CVE-2023-6357 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-10245Codesys control for beaglebone out-of-bounds write vulnerabilityCODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.EPSS 2.5%9.8CVE-2019-18858Codesys control for beaglebone classic buffer overflow vulnerabilityCODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.EPSS 1.9%9.8CVE-2019-13548Codesys control for beaglebone stack-based buffer overflow vulnerabilityCODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack…EPSS 5.8%9.8CVE-2019-9010Codesys control for beaglebone sl vulnerabilityAn issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All …EPSS 1.9%9.8CVE-2018-10612Codesys control for beaglebone sl improper access control vulnerabilityIn 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not…EPSS 1.3%8.8CVE-2022-4046Codesys control for beaglebone sl memory buffer overflow vulnerabilityIn CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user …EPSS 0.88%8.8CVE-2022-47387Codesys control for beaglebone sl out-of-bounds write vulnerabilityAn authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…EPSS 1.3%8.8CVE-2022-47388Codesys control for beaglebone sl out-of-bounds write vulnerabilityAn authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products i…EPSS 1.3%

Source: NIST National Vulnerability Database (record CVE-2023-6357), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.