control for linux sl · threatengine.sh

Home/Product/codesys control for linux sl

Product

codesys control for linux sl

52 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 4.5.0.0 and < 4.19.0.0

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource w

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries w

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communicatio

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communicatio

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communicat

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerabili

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multipl

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to

Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote att

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecuti

>= 3.0 and < 4.8.0.0

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to bl

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a cr

>= 4.4.0.0 and < 4.5.0.0

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access t

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid chann

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS product

>= 3.0 and < 4.1.0.0

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to

>= 3.0 and < 4.0.1.0

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

>= 3.0 and < 3.5.14.20

An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations

>= 3.0 and < 3.5.14.20

An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communic

>= 3.0 and < 3.5.16.0

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in us

>= 3.0 and < 3.5.14.0

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.

>= 3.0 and < 3.5.14.0

Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.

>= 3.0 and < 3.5.14.0

In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communicatio

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin