Codesys vulnerabilities
104 CVEs and advisories name Codesys as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-47383CODESYS: Multiple products prone to stack based out-of-bounds write
- CVE-2022-47382CODESYS: Multiple products prone to stack based out-of-bounds write
- CVE-2022-47381CODESYS: Multiple products prone to stack based out-of-bounds write
- CVE-2022-47380CODESYS: Multiple products prone to out-of-bounds write
- CVE-2022-47379CODESYS: Multiple products prone to out-of-bounds write
- CVE-2022-47378CODESYS: Multiple products prone to Improper Input Validation
- CVE-2022-4048CODESYS V3 prone to Inadequate Encryption Stregth
- CVE-2022-4224CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
- CVE-2018-25048Codesys Runtime Improper Limitation of a Pathname
- CVE-2020-12069CODESYS V3 prone to Inadequate Password Hashing
- CVE-2022-1989CODESYS Visualization vulnerable to user enumeration
- CVE-2022-30792CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
- CVE-2022-30791CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- CVE-2022-1794Plaintext Storage of a password in CODESYS V3 OPC DA Server
- CVE-2022-32143CODESYS runtime system prone to directory acces
- CVE-2022-32142CODESYS runtime system prone to denial of service due to use of out of range pointer
- CVE-2022-32141CODESYS runtime system prone to denial of service due to buffer over read
- CVE-2022-32140CODESYS runtime system prone to denial of service due to buffer copy
- CVE-2022-32139CODESYS runtime system prone to denial of service due to out of bounds read
- CVE-2022-32138CODESYS runtime system prone to denial of service due to Unexpected Sign Extension
- CVE-2022-32137CODESYS Runtime System prone to heap based buffer overflow
- CVE-2022-32136Codesys runtime systems: Access of uninitialised pointer lead to denial of service.
- CVE-2022-31806Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT
- CVE-2022-31805Insecure transmission of credentials
- CVE-2022-31804CODESYS Gateway server prone to denial of service attack due to excessive memory allocation
- CVE-2022-31803CODESYS Gateway Server V2 prone to Denial of Service Attack
- CVE-2022-31802Partial string comparison in CODESYS gateway server
- CVE-2022-1965CODESYS runtime system prone to file deletion due to improper error handling
- CVE-2022-22519Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CVE-2022-22518A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.