CODESYS Control PKI Folder Access Vulnerability Allowing Certificate Manipulation

A vulnerability exists in the CODESYS Control runtime system, allowing low-privileged attackers to remotely access the PKI folder. This access enables the reading and writing of certificates and their associated keys. As a result, sensitive data could be extracted or certificates could be accepted as trusted. While all services remain operational, deleting the certificates would restrict communication to unencrypted only.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of sensitive cryptographic materials, such as certificates and private keys, within the CODESYS Control runtime environment. This could allow for the extraction of sensitive data or the establishment of trusted certificates, potentially facilitating further attacks or unauthorized actions.