Codesys
Codesys Embedded Target Visu Toolkit: vulnerabilidades y CVE
Codesys Embedded Target Visu Toolkit tiene 16 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE16
Últimos 12 meses0
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2018-25048 | Alta (8.8) | 1.0% | — | 23 mar 2023 | The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device. |
| CVE-2022-30792 | Alta (7.5) | 0.89% | — | 11 jul 2022 | In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected. |
| CVE-2022-30791 | Alta (7.5) | 0.89% | — | 11 jul 2022 | In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected. |
| CVE-2022-22519 | Alta (7.5) | 1.5% | — | 7 abr 2022 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system. |
| CVE-2022-22517 | Alta (7.5) | 1.3% | — | 7 abr 2022 | An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed. |
| CVE-2022-22515 | Alta (8.1) | 1.1% | — | 7 abr 2022 | A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products. |
| CVE-2022-22514 | Alta (7.1) | 0.89% | — | 7 abr 2022 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither… |
| CVE-2022-22513 | Media (6.5) | 1.0% | — | 7 abr 2022 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. |
| CVE-2021-36763 | Alta (7.5) | 1.0% | — | 3 ago 2021 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. |
| CVE-2021-33485 | Crítica (9.8) | 1.1% | — | 3 ago 2021 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. |
| CVE-2021-29242 | Alta (7.3) | 1.1% | — | 3 may 2021 | CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level… |
| CVE-2020-15806 | Alta (7.5) | 2.0% | — | 22 jul 2020 | CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. |
| CVE-2020-10245 | Crítica (9.8) | 2.5% | — | 26 mar 2020 | CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. |
| CVE-2019-18858 | Crítica (9.8) | 1.9% | — | 20 nov 2019 | CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. |
| CVE-2019-13548 | Crítica (9.8) | 5.8% | — | 13 sept 2019 | CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote… |
| CVE-2019-13532 | Alta (7.5) | 3.2% | — | 13 sept 2019 | CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller. |
Otros productos de Codesys
Control FOR Pfc100 SL · 52Control FOR Linux SL · 52Control FOR Pfc200 SL · 52Control FOR Iot2000 SL · 52Control Runtime System Toolkit · 52Control FOR Raspberry PI SL · 51Control FOR Beaglebone SL · 50Control FOR Empc-a/imx6 SL · 49Development System · 44Control FOR Wago Touch Panels 600 SL · 43Control FOR Plcnext SL · 42Control RTE SL · 30