Codesys
Codesys Remote Target Visu Toolkit: vulnerabilities and CVEs
Codesys Remote Target Visu Toolkit has 16 published vulnerabilities, 0 of them in the last 12 months. 4 are rated critical and 0 are listed by CISA as actively exploited.
CVEs16
Last 12 months0
Critical4
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2018-25048 | High (8.8) | 1.0% | — | Mar 23, 2023 | The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device. |
| CVE-2022-30792 | High (7.5) | 0.89% | — | Jul 11, 2022 | In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected. |
| CVE-2022-30791 | High (7.5) | 0.89% | — | Jul 11, 2022 | In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected. |
| CVE-2022-22519 | High (7.5) | 1.5% | — | Apr 7, 2022 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system. |
| CVE-2022-22517 | High (7.5) | 1.3% | — | Apr 7, 2022 | An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed. |
| CVE-2022-22515 | High (8.1) | 1.1% | — | Apr 7, 2022 | A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products. |
| CVE-2022-22514 | High (7.1) | 0.89% | — | Apr 7, 2022 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither… |
| CVE-2022-22513 | Medium (6.5) | 1.0% | — | Apr 7, 2022 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. |
| CVE-2021-36763 | High (7.5) | 1.0% | — | Aug 3, 2021 | In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. |
| CVE-2021-33485 | Critical (9.8) | 1.1% | — | Aug 3, 2021 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. |
| CVE-2021-29242 | High (7.3) | 1.1% | — | May 3, 2021 | CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level… |
| CVE-2020-15806 | High (7.5) | 2.0% | — | Jul 22, 2020 | CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. |
| CVE-2020-10245 | Critical (9.8) | 2.5% | — | Mar 26, 2020 | CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. |
| CVE-2019-18858 | Critical (9.8) | 1.9% | — | Nov 20, 2019 | CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. |
| CVE-2019-13548 | Critical (9.8) | 5.8% | — | Sep 13, 2019 | CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote… |
| CVE-2019-13532 | High (7.5) | 3.2% | — | Sep 13, 2019 | CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller. |
Other products by Codesys
Control FOR Pfc100 SL · 52Control FOR Linux SL · 52Control FOR Pfc200 SL · 52Control FOR Iot2000 SL · 52Control Runtime System Toolkit · 52Control FOR Raspberry PI SL · 51Control FOR Beaglebone SL · 50Control FOR Empc-a/imx6 SL · 49Development System · 44Control FOR Wago Touch Panels 600 SL · 43Control FOR Plcnext SL · 42Control RTE SL · 30