Codesys

Safety Sil2

20 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.5

CVE-2023-37549

  • EPSS 0.08%
  • Published 03.08.2023 12:15:10
  • Last modified 21.11.2024 08:11:55

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potenti...

6.5

CVE-2023-37548

  • EPSS 0.08%
  • Published 03.08.2023 12:15:09
  • Last modified 21.11.2024 08:11:54

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potenti...

6.5

CVE-2023-37547

  • EPSS 0.08%
  • Published 03.08.2023 12:15:09
  • Last modified 21.11.2024 08:11:54

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potenti...

6.5

CVE-2023-37546

  • EPSS 0.08%
  • Published 03.08.2023 12:15:09
  • Last modified 21.11.2024 08:11:54

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potenti...

6.5

CVE-2023-37545

  • EPSS 0.08%
  • Published 03.08.2023 11:15:09
  • Last modified 21.11.2024 08:11:54

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potenti...

8.8

CVE-2022-4224

  • EPSS 0.6%
  • Published 23.03.2023 12:15:12
  • Last modified 21.11.2024 07:34:49

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

6.5

CVE-2020-7052

Exploit
  • EPSS 0.76%
  • Published 24.01.2020 20:15:10
  • Last modified 21.11.2024 05:36:34

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

7.5

CVE-2019-9009

  • EPSS 0.38%
  • Published 17.09.2019 16:15:11
  • Last modified 21.11.2024 04:50:48

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.

7.5

CVE-2018-20025

  • EPSS 1.54%
  • Published 19.02.2019 21:29:00
  • Last modified 21.11.2024 04:00:46

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.

7.5

CVE-2018-20026

  • EPSS 1.43%
  • Published 19.02.2019 21:29:00
  • Last modified 21.11.2024 04:00:47

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.