codesys Vulnerability Advisory Catalog

Total 114 security vulnerabilities recorded for codesys software and firmware.

← Back to All Vendors
CVE-2020-7052 MEDIUM
Component: control_for_beaglebone

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condit...

📅 2020-01-24
CVSS 6.5 Dossier →
Component: plcwinnt

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a ...

📅 2019-12-20
CVSS 6.5 Dossier →
CVE-2019-18858 CRITICAL
Component: control_for_beaglebone

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow....

📅 2019-11-20
CVSS 9.8 Dossier →
CVE-2019-16265 CRITICAL
Component: eni_server

CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow....

📅 2019-10-25
CVSS 9.8 Dossier →
Component: codesys

3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content witho...

📅 2019-09-17
CVSS 8.6 Dossier →
Component: control_for_beaglebone

3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trust...

📅 2019-09-17
CVSS 6.5 Dossier →
Component: control_for_beaglebone

An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash....

📅 2019-09-17
CVSS 7.5 Dossier →
Component: control_for_beaglebone

An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime....

📅 2019-09-17
CVSS 8.8 Dossier →
CVE-2019-13548 CRITICAL
Component: control_for_beaglebone

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack ...

📅 2019-09-13
CVSS 9.8 Dossier →
Component: control_for_beaglebone

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to ...

📅 2019-09-13
CVSS 7.5 Dossier →
Component: control_for_beaglebone_sl

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected COD...

📅 2019-08-15
CVSS 7.5 Dossier →
CVE-2019-9010 CRITICAL
Component: control_for_beaglebone_sl

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All v...

📅 2019-08-15
CVSS 9.8 Dossier →
Component: control_for_beaglebone_sl

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being...

📅 2019-08-15
CVSS 8.8 Dossier →
Component: control_for_beaglebone_sl

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0....

📅 2019-02-19
CVSS 7.5 Dossier →
Component: control_for_beaglebone_sl

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0....

📅 2019-02-19
CVSS 7.5 Dossier →
CVE-2018-10612 CRITICAL
Component: control_for_beaglebone_sl

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not ...

📅 2019-01-29
CVSS 9.8 Dossier →
CVE-2017-6027 CRITICAL
Component: web_server

An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, pa...

📅 2017-05-19
CVSS 9.8 Dossier →
CVE-2017-6025 CRITICAL
Component: web_server

A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, par...

📅 2017-05-19
CVSS 9.8 Dossier →
Page 5 of 5 (114 Total Records)