Codesys Development System V3 (Codesys) - vulnerabilities (CVEs)

40 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-06-04. Vendor: Codesys.

CVEs of Codesys Development System V3

CVE-2023-5751 - CVSS 7.8 (high), 2024-06-04: A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of…
CVE-2023-37555 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37558 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent…
CVE-2023-37551 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the…
CVE-2023-37554 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37557 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the…
CVE-2023-37550 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37553 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37556 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37559 - CVSS 6.5 (medium), 2023-08-03: After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent…
CVE-2023-37549 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37552 - CVSS 6.5 (medium), 2023-08-03: In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37548 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37547 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37546 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2023-37545 - CVSS 6.5 (medium), 2023-08-03: In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with…
CVE-2022-47393 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of…
CVE-2022-47392 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products…
CVE-2022-47389 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-4048 - CVSS 7.7 (high), 2023-05-15: Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate…
CVE-2022-47388 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47391 - CVSS 7.5 (high), 2023-05-15: In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid…
CVE-2022-47387 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47390 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47379 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory…
CVE-2022-47382 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47385 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in…
CVE-2022-47378 - CVSS 6.5 (medium), 2023-05-15: Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific…
CVE-2022-47381 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
CVE-2022-47384 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
CVE-2022-47380 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
CVE-2022-47383 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-47386 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
CVE-2022-30791 - CVSS 7.5 (high), 2022-07-11: In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections.…
CVE-2022-30792 - CVSS 7.5 (high), 2022-07-11: In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication…
CVE-2022-22515 - CVSS 8.1 (high), 2022-04-07: A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify…
CVE-2022-22514 - CVSS 7.1 (high), 2022-04-07: An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of…
CVE-2022-22517 - CVSS 7.5 (high), 2022-04-07: An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.…
CVE-2022-22513 - CVSS 6.5 (medium), 2022-04-07: An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
CVE-2022-22516 - CVSS 7.8 (high), 2022-04-07: The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.