Simulation Runtime (Codesys) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2023-03-23. Vendor: Codesys.

CVEs of Simulation Runtime

• CVE-2018-25048 - CVSS 8.8 (high), 2023-03-23: The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system…
• CVE-2021-29242 - CVSS 7.3 (high), 2021-05-03: CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's…
• CVE-2020-15806 - CVSS 7.5 (high), 2020-07-22: CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
• CVE-2020-7052 - CVSS 6.5 (medium), 2020-01-24: CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
• CVE-2019-9009 - CVSS 7.5 (high), 2019-09-17: An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
• CVE-2019-9008 - CVSS 8.8 (high), 2019-09-17: An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.