Total 114 security vulnerabilities recorded for codesys software and firmware.
The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low...
The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local atta...
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient...
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wro...
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a COD...
Out-of-Bounds read vulnerability in OSCAT Basic Library allows an local, unprivileged attacker to access limited internal data of the PLC which may le...
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the ...
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user p...
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the p...
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco...
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inco...
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause ...
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can uti...
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inc...
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inc...
In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to...