CVE-2023-3663

Name of the Vulnerable Software and Affected Versions CODESYS Development System versions 3.5.11.20 through 3.5.19.20

Description The issue is related to insufficient data authentication in the CODESYS Development System, which may allow a remote attacker to modify the content of notifications received via HTTP from the CODESYS notification server. This could potentially be exploited by an unauthenticated remote attacker.

Recommendations For versions 3.5.11.20 through 3.5.19.20, update to a version that includes the necessary integrity checks to prevent manipulation of notification content. As a temporary workaround, consider restricting access to the CODESYS notification server to minimize the risk of exploitation.