CODESYS Development System - Deserialization of Untrusted Data

An attacker could trick a CODESYS developer into opening a malicious project file, which would execute arbitrary code on the engineering workstation when print settings are accessed. This could compromise the integrity of control logic before deployment to industrial systems.

CODESYS developers and engineering teams who use the Development System to create and modify control logic for industrial PLC, motion control, and safety systems. This affects any organization using CODESYS for programming industrial automation equipment, including manufacturers of embedded control systems and end users developing on-site applications.

An attacker crafts a malicious CODESYS project or archive file with embedded code in the print settings serialization. The attacker distributes this file to a CODESYS developer (via email, file share, or repository). When the developer opens the project file in CODESYS Development System and accesses print or printer configuration options, the malicious serialized data is deserialized and executed with the user's privileges.