Vulnerabilities of CODESYS CODESYS Development System V3
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-47384 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of… | 8.8 High | May 15, 2023 |
| CVE-2022-47383 | An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component… | 8.8 High | May 15, 2023 |
| CVE-2022-47382 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of… | 8.8 High | May 15, 2023 |
| CVE-2022-47381 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in… | 8.8 High | May 15, 2023 |
| CVE-2022-47380 | An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products… | 8.8 High | May 15, 2023 |
| CVE-2022-47379 | An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple… | 8.8 High | May 15, 2023 |
| CVE-2022-47378 | Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability | 6.5 Medium | May 15, 2023 |
| CVE-2022-4048 | Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated… | 7.7 High | May 15, 2023 |
| CVE-2022-30792 | In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized… | 7.5 High | Jul 11, 2022 |
| CVE-2022-30791 | In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker… | 7.5 High | Jul 11, 2022 |
| CVE-2022-22517 | An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a… | 7.5 High | Apr 7, 2022 |
| CVE-2022-22516 | The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and… | 7.8 High | Apr 7, 2022 |
| CVE-2022-22515 | A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the… | 8.1 High | Apr 7, 2022 |
| CVE-2022-22514 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request | 7.1 High | Apr 7, 2022 |
| CVE-2022-22513 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected… | 6.5 Medium | Apr 7, 2022 |
Other CODESYS products
CODESYS Control for BeagleBone SL 50
CODESYS Control for emPC-A/iMX6 SL 50
CODESYS Control for IOT2000 SL 50
CODESYS Control for Linux SL 50
CODESYS Control for PFC100 SL 50
CODESYS Control for PFC200 SL 50
CODESYS Control for Raspberry Pi SL 50
CODESYS Control for WAGO Touch Panels 600 SL 50
CODESYS Control Win (SL) 49
CODESYS Control for PLCnext SL 49
CODESYS Control RTE (SL) 48
CODESYS Control RTE (for Beckhoff CX) SL 48