CVE-2017-6027

Name of the Vulnerable Software and Affected Versions CODESYS Web Server versions 2.3 and prior

Description An Arbitrary File Upload issue was discovered, allowing a specially crafted web server request to upload arbitrary files to the CODESYS Web Server without authorization, potentially enabling remote code execution.

Recommendations For CODESYS Web Server versions 2.3 and prior, update to a version later than 2.3 to resolve the issue. As a temporary workaround, consider restricting access to the web server to minimize the risk of exploitation.