Codesys Control For Plcnext Sl vulnerabilities, page 3
45 vulnerabilities
Known vulnerabilities in Codesys Control For Plcnext Sl, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-37555codesyscodesys control for beaglebone sl+31
EPSS score0.63%
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37556.CVE-2023-37552codesyscodesys control for beaglebone sl+31EPSS score0.63%
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37553, CVE-2023-37554, CVE-2023-37555 and CVE-2023-37556.CVE-2023-37556codesyscodesys control for beaglebone sl+31EPSS score0.63%
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555.CVE-2023-37558codesyscodesys control for beaglebone sl+31EPSS score0.63%
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559CVE-2023-6357codesyscodesys control for beaglebone sl+21EPSS score0.96%
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.