Codesys Plchandler vulnerabilities

4 vulnerabilities

Known vulnerabilities in Codesys Plchandler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-20026codesyscontrol_for_beaglebone_sl+18
EPSS score
3.04%
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.7.5CVE-2021-29242codesyscontrol_for_beaglebone_sl+21
EPSS score
1.07%
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.7.5CVE-2022-31805codesyscodesys development system+21
EPSS score
1.02%
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.8.7CVE-2026-76992codesysdevelopment system 3+7
EPSS score
0.33%
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory consumption, resulting in a denial-of-service condition thus leading to a total loss of availablity.