runtime toolkit · threatengine.sh

Home/Product/codesys runtime toolkit

Product

codesys runtime toolkit

23 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

>= 3.5.18.0 and < 3.5.21.40

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource w

A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries w

>= 3.0 and < 3.5.19.0

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and

>= 2.0 and < 2.4.7.57

In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firm

>= 2.0 and < 2.4.7.57

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request

>= 2.0 and < 2.4.7.57

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid of

>= 2.0 and < 2.4.7.57

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause

>= 2.0 and < 2.4.7.57

In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting i

>= 2.0 and < 2.4.7.57

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a d

>= 2.0 and < 2.4.7.57

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow,

>= 2.0 and < 2.4.7.57

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized po

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and the

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between cl

>= 2.0 and < 2.4.7.57

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is no

A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior

A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full a

In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may re

>= 3.5.8.0 and < 3.5.17.10

All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handl

CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.

CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.

CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.

3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT befor

>= 3.0 and < 3.5.16.0

An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in us

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin