CVE-2023-6357

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Dec 5, 2023
Source updated: Aug 2, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

OS Command Injection in multiple CODESYS products

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CODESYS Control for BeagleBone SL

Vendor: CODESYS
Product: CODESYS Control for BeagleBone SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for BeagleBone SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for emPC-A/iMX6 SL

Vendor: CODESYS
Product: CODESYS Control for emPC-A/iMX6 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for emPC-A/iMX6 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for IOT2000 SL

Vendor: CODESYS
Product: CODESYS Control for IOT2000 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for IOT2000 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for Linux ARM SL

Vendor: CODESYS
Product: CODESYS Control for Linux ARM SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Linux ARM SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for Linux SL

Vendor: CODESYS
Product: CODESYS Control for Linux SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Linux SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for PFC100 SL

Vendor: CODESYS
Product: CODESYS Control for PFC100 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PFC100 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for PFC200 SL

Vendor: CODESYS
Product: CODESYS Control for PFC200 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PFC200 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for PLCnext SL

Vendor: CODESYS
Product: CODESYS Control for PLCnext SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for PLCnext SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for Raspberry Pi SL

Vendor: CODESYS
Product: CODESYS Control for Raspberry Pi SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for Raspberry Pi SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Control for WAGO Touch Panels 600 SL

Vendor: CODESYS
Product: CODESYS Control for WAGO Touch Panels 600 SL
Platforms: Unknown
Default status: unaffected

CODESYS Control for WAGO Touch Panels 600 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	4.11.0.0	Unavailable	None listed

CODESYS Runtime Toolkit for Linux or QNX

Vendor: CODESYS
Product: CODESYS Runtime Toolkit for Linux or QNX
Platforms: Unknown
Default status: unaffected

CODESYS Runtime Toolkit for Linux or QNX · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	3.5.19.50	Unavailable	None listed