Codesys vulnerabilities
104 CVEs and advisories name Codesys as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-22517Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CVE-2022-22516CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.
- CVE-2022-22515A component of the CODESYS Control runtime system allows read and write access to configuration files
- CVE-2022-22514Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CVE-2022-22513Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CVE-2021-34599Improper Certificate Validation in CODESYS Git
- CVE-2021-34596CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
- CVE-2021-34595CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
- CVE-2021-34593CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service
- CVE-2021-34586CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
- CVE-2021-34585CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)
- CVE-2021-34584CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)
- CVE-2021-34583CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)
- CVE-2015-6460Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via