Codesys Plchandler vulnerabilities

3 vulnerabilities

Known vulnerabilities in Codesys Plchandler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2025-41739codesyscodesys control for beaglebone sl+15
EPSS score
0.35%
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.7.5CVE-2022-31805codesyscodesys development system+21
EPSS score
1.02%
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.7.5CVE-2022-22517codesyscodesys control for beaglebone sl+42
EPSS score
1.32%
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.