Known vulnerabilities in CODESYS Control for emPC-A/iMX6 SL
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2023-37545 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Medium | Aug 3, 2023 |
| CVE-2022-47393 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer… | 6.5 Medium | May 15, 2023 |
| CVE-2022-47392 | An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce… | 6.5 Medium | May 15, 2023 |
| CVE-2022-47391 | In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation… | 7.5 High | May 15, 2023 |
| CVE-2022-47390 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47389 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47388 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47387 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of… | 8.8 High | May 15, 2023 |
| CVE-2022-47386 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47385 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47384 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of… | 8.8 High | May 15, 2023 |
| CVE-2022-47383 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47382 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of… | 8.8 High | May 15, 2023 |
| CVE-2022-47381 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in… | 8.8 High | May 15, 2023 |
| CVE-2022-47380 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products… | 8.8 High | May 15, 2023 |
| CVE-2022-47379 | An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple… | 8.8 High | May 15, 2023 |
| CVE-2022-47378 | Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability | 6.5 Medium | May 15, 2023 |
| CVE-2022-30792 | In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized… | 7.5 High | Jul 11, 2022 |
| CVE-2022-30791 | In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker… | 7.5 High | Jul 11, 2022 |
| CVE-2022-22519 | A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read… | 7.5 High | Apr 7, 2022 |
| CVE-2022-22518 | A bug in CmpUserMgr component can lead to only partially applied security policies | 6.5 Medium | Apr 7, 2022 |
| CVE-2022-22517 | An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a… | 7.5 High | Apr 7, 2022 |
| CVE-2022-22515 | A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the… | 8.1 High | Apr 7, 2022 |
| CVE-2022-22514 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request | 7.1 High | Apr 7, 2022 |
| CVE-2022-22513 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected… | 6.5 Medium | Apr 7, 2022 |
Other CODESYS products
CODESYS Control for BeagleBone SL 50
CODESYS Control for IOT2000 SL 50
CODESYS Control for Linux SL 50
CODESYS Control for PFC100 SL 50
CODESYS Control for PFC200 SL 50
CODESYS Control for Raspberry Pi SL 50
CODESYS Control for WAGO Touch Panels 600 SL 50
CODESYS Control Win (SL) 49
CODESYS Control for PLCnext SL 49
CODESYS Control RTE (for Beckhoff CX) SL 48
CODESYS Control RTE (SL) 48
CODESYS HMI (SL) 47