Known vulnerabilities in CODESYS V2

Is your version affected?

CVE	Summary	Score	Published
CVE-2021-34596	A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and…	6.5 Medium	Oct 26, 2021
CVE-2021-34595	A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit…	8.1 High	Oct 26, 2021
CVE-2021-34593	In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid…	7.5 High	Oct 26, 2021
CVE-2021-34586	In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in…	7.5 High	Oct 26, 2021
CVE-2021-34585	In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error	7.5 High	Oct 26, 2021
CVE-2021-34584	Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service…	9.1 Critical	Oct 26, 2021
CVE-2021-34583	Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service…	7.5 High	Oct 26, 2021