Codesys vulnerabilities, page 5
156 vulnerabilities
Known vulnerabilities in Codesys products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 139 products.
CVE-2022-4046codesyscodesys control for beaglebone sl+13
EPSS score0.88%
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.CVE-2022-4224codesyscontrol_for_beaglebone_sl+19EPSS score0.88%
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.CVE-2022-4048codesyscodesys development system v3+1EPSS score0.08%
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.CVE-2022-22518codesyscodesys control for beaglebone sl+19EPSS score0.61%
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.CVE-2022-22513codesyscodesys control for beaglebone sl+40EPSS score1.04%
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.CVE-2022-22514codesyscodesys control for beaglebone sl+40EPSS score0.89%
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.CVE-2022-22519codesyscodesys control for beaglebone sl+34EPSS score1.46%
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.CVE-2022-22508codesys v3codesys control for beaglebone sl+27EPSS score0.73%
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.CVE-2022-22516codesyscodesys control rte (for beckhoff cx) sl+7EPSS score0.26%
The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.CVE-2022-22515codesyscodesys control for beaglebone sl+35EPSS score1.11%
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.CVE-2022-22517codesyscodesys control for beaglebone sl+42EPSS score1.32%
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.CVE-2022-22510codesysprofinetEPSS score0.97%
Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.CVE-2022-32143codesysplcwinnt+1EPSS score1.19%
In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured on the controller or if remote attacker has previously successfully authenticated himself to the controller. A successful Attack may lead to a denial of service, change of local files, or drain of confidential Information. User interaction is not requiredCVE-2022-32141codesysplcwinnt+1EPSS score1.02%
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.CVE-2022-32136codesysplcwinnt+1EPSS score1.02%
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.CVE-2022-32140codesysplcwinnt+1EPSS score1.04%
Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.CVE-2022-32138codesysplcwinnt+1EPSS score1.19%
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.CVE-2022-32137codesysplcwinnt+1EPSS score1.39%
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.CVE-2022-32139codesysplcwinnt+1EPSS score1.02%
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.CVE-2022-32142codesysplcwinnt+1EPSS score1.05%
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.