Codesys
Codesys Control Runtime System Toolkit: vulnerabilidades y CVE
Codesys Control Runtime System Toolkit tiene 52 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE52
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-4046 | Alta (8.8) | 0.88% | — | 3 ago 2023 | In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device. |
| CVE-2023-37559 | Media (6.5) | 0.63% | — | 3 ago 2023 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read… |
| CVE-2023-37558 | Media (6.5) | 0.63% | — | 3 ago 2023 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read… |
| CVE-2023-37557 | Media (6.5) | 0.63% | — | 3 ago 2023 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can… |
| CVE-2023-37556 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally… |
| CVE-2023-37555 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally… |
| CVE-2023-37554 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally… |
| CVE-2023-37553 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally… |
| CVE-2023-37552 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally… |
| CVE-2023-37551 | Media (6.5) | 0.50% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions… |
| CVE-2023-37550 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2023-37549 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2023-37548 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2023-37547 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2023-37546 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2023-37545 | Media (6.5) | 0.63% | — | 3 ago 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally… |
| CVE-2022-47393 | Media (6.5) | 0.97% | — | 15 may 2023 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation. |
| CVE-2022-47392 | Media (6.5) | 0.85% | — | 15 may 2023 | An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which… |
| CVE-2022-47391 | Alta (7.5) | 1.9% | — | 15 may 2023 | In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service. |
| CVE-2022-47390 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47389 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47388 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47387 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47386 | Alta (8.8) | 1.4% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47385 | Alta (8.8) | 1.4% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47384 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47383 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47382 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a… |
| CVE-2022-47381 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition,… |
| CVE-2022-47380 | Alta (8.8) | 1.3% | — | 15 may 2023 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition,… |
Otros productos de Codesys
Control FOR Iot2000 SL · 52Control FOR Linux SL · 52Control FOR Pfc200 SL · 52Control FOR Pfc100 SL · 52Control FOR Raspberry PI SL · 51Control FOR Beaglebone SL · 50Control FOR Empc-a/imx6 SL · 49Development System · 44Control FOR Wago Touch Panels 600 SL · 43Control FOR Plcnext SL · 42Control RTE SL · 30Control WIN SL · 30