Known vulnerabilities in CODESYS Embedded Target Visu Toolkit

Is your version affected?

CVE	Summary	Score	Published
CVE-2024-8175	An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS	7.5 High	Sep 25, 2024
CVE-2022-30792	In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized…	7.5 High	Jul 11, 2022
CVE-2022-30791	In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker…	7.5 High	Jul 11, 2022
CVE-2022-22519	A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read…	7.5 High	Apr 7, 2022
CVE-2022-22517	An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a…	7.5 High	Apr 7, 2022
CVE-2022-22515	A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the…	8.1 High	Apr 7, 2022
CVE-2022-22514	An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request	7.1 High	Apr 7, 2022
CVE-2022-22513	An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected…	6.5 Medium	Apr 7, 2022