Vulnérabilités de CODESYS CODESYS HMI (SL)
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-8047 | The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a… | 8.7 Élevée | 26 mai 2026 |
| CVE-2026-8046 | The affected products insufficiently verify authorization when deleting user accounts | 7.2 Élevée | 26 mai 2026 |
| CVE-2025-41660 | A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system,… | 8.8 Élevée | 24 mars 2026 |
| CVE-2025-41738 | An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access… | 7.5 Élevée | 1 déc. 2025 |
| CVE-2024-8175 | An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS | 7.5 Élevée | 25 sept. 2024 |
| CVE-2023-5751 | A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the… | 7.8 Élevée | 4 juin 2024 |
| CVE-2024-5000 | An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS… | 7.5 Élevée | 4 juin 2024 |
| CVE-2022-4046 | In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer… | 8.8 Élevée | 3 août 2023 |
| CVE-2023-37559 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37558 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37557 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37556 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37555 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37554 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37553 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37552 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37551 | In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37550 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37549 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37548 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37547 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37546 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2023-37545 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network… | 6.5 Moyenne | 3 août 2023 |
| CVE-2022-47393 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer… | 6.5 Moyenne | 15 mai 2023 |
| CVE-2022-47392 | An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce… | 6.5 Moyenne | 15 mai 2023 |
Autres produits CODESYS
CODESYS Control for BeagleBone SL 50
CODESYS Control for emPC-A/iMX6 SL 50
CODESYS Control for IOT2000 SL 50
CODESYS Control for Linux SL 50
CODESYS Control for PFC100 SL 50
CODESYS Control for PFC200 SL 50
CODESYS Control for Raspberry Pi SL 50
CODESYS Control for WAGO Touch Panels 600 SL 50
CODESYS Control Win (SL) 49
CODESYS Control for PLCnext SL 49
CODESYS Control RTE (SL) 48
CODESYS Control RTE (for Beckhoff CX) SL 48