control runtime system toolkit · threatengine.sh

Home/Product/codesys control runtime system toolkit

Product

codesys control runtime system toolkit

52 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communicatio

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communicatio

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communicat

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communicati

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerabili

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multipl

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to

Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote att

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecuti

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to bl

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a cr

>= 3.5.17.0 and < 3.5.18.0

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access t

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid chann

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS product

In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

>= 3.0 and < 3.5.17.0

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to

>= 3.0 and < 3.5.16.70

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

>= 3.0 and < 3.5.16.10

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

>= 3.0 and < 3.5.16.0

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptib

>= 3.0 and < 3.5.15.40

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.

>= 3.0 and < 3.5.15.30

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote deni

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.

>= 3.0 and < 3.5.12.80

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which

>= 3.0 and < 3.5.12.80

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin