Development System V3 (Codesys) - vulnerabilities (CVEs)
20 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-06-04. Vendor: Codesys.
CVEs of Development System V3
- CVE-2023-5751 - CVSS 7.8 (high), 2024-06-04: A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of…
- CVE-2022-47392 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products…
- CVE-2022-47393 - CVSS 6.5 (medium), 2023-05-15: An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of…
- CVE-2022-47387 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
- CVE-2022-47390 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
- CVE-2022-47389 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
- CVE-2022-4048 - CVSS 7.7 (high), 2023-05-15: Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate…
- CVE-2022-47388 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
- CVE-2022-47391 - CVSS 7.5 (high), 2023-05-15: In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid…
- CVE-2022-47380 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
- CVE-2022-47383 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
- CVE-2022-47386 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in…
- CVE-2022-47379 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory…
- CVE-2022-47382 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
- CVE-2022-47385 - CVSS 8.8 (high), 2023-05-15: An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in…
- CVE-2022-47378 - CVSS 6.5 (medium), 2023-05-15: Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific…
- CVE-2022-47381 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
- CVE-2022-47384 - CVSS 8.8 (high), 2023-05-15: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
- CVE-2022-4224 - CVSS 8.8 (high), 2023-03-23: In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS…
- CVE-2018-20026 - CVSS 7.5 (high), 2019-02-19: Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
- CVE-2018-10612 - CVSS 9.8 (critical), 2019-01-29: In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled…
