High severity7.8NVD Advisory· Published May 4, 2021· Updated Jun 17, 2026
CVE-2021-29240
CVE-2021-29240
Description
The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.
Affected products
3cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*range: >=3.0,<3.5.17.0
- (no CPE)range: <3.5.17.0
- CODESYS/Development Systemdescription
Patches
Vulnerability mechanics
References
3- customers.codesys.com/index.phpnvdExploitVendor Advisory
- customers.codesys.com/index.phpnvdVendor Advisory
- www.codesys.com/security/security-reports.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.