Codesys

Runtime Toolkit

28 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.1

CVE-2021-34595

  • EPSS 0.47%
  • Published 26.10.2021 10:15:08
  • Last modified 15.08.2025 20:25:40

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.

5

CVE-2021-34593

Exploit
  • EPSS 1.6%
  • Published 26.10.2021 10:15:08
  • Last modified 15.08.2025 20:25:58

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further comm...

7.5

CVE-2021-33486

  • EPSS 0.39%
  • Published 03.08.2021 16:15:08
  • Last modified 21.11.2024 06:08:55

All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.

7.5

CVE-2021-30195

  • EPSS 0.42%
  • Published 25.05.2021 13:15:17
  • Last modified 15.08.2025 20:26:54

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.

7.5

CVE-2021-30186

  • EPSS 0.45%
  • Published 25.05.2021 13:15:17
  • Last modified 15.08.2025 20:20:41

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

5.3

CVE-2021-30187

  • EPSS 0.12%
  • Published 25.05.2021 12:15:07
  • Last modified 15.08.2025 20:28:33

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

6.5

CVE-2019-19789

  • EPSS 0.46%
  • Published 20.12.2019 13:15:11
  • Last modified 21.11.2024 04:35:23

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.

8.8

CVE-2019-9013

  • EPSS 0.14%
  • Published 15.08.2019 17:15:13
  • Last modified 21.11.2024 04:50:48

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all...