8.1
High
CVE-2022-1965 Multiple products of CODESYS implement a improper error handling
Description
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Runtime Toolkit 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| PLCWinNT 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
Other CVEs of Runtime Toolkit
The 13 CVEs of Runtime Toolkit →
CVE-2026-76992
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate…
8.7
High
CVE-2026-79625
Affected products do not properly synchronize access to their monitoring functionality
7.2
High
CVE-2025-41659
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and…
8.3
High
CVE-2025-41658
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due…
5.5
Medium