Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

codesys control for plcnext vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2020-12068
An issue exists in CODESYS Development System prior to 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Development SystemCodesys Hmi
4
CVSSv2
CVE-2020-7052
CODESYS Control V3, Gateway V3, and HMI V3 prior to 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys GatewayCodesys HmiCodesys Safety Sil2Codesys Simulation Runtime
10
CVSSv2
CVE-2020-10245
CODESYS V3 web server prior to 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
7.5
CVSSv2
CVE-2019-18858
CODESYS 3 web server prior to 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
NA
CVE-2023-6357
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
Codesys Runtime ToolkitCodesys Control For Wago Touch Panels 600 SlCodesys Control For Raspberry Pi SlCodesys Control For Pfc200 SlCodesys Control For Plcnext SlCodesys Control For Pfc100 SlCodesys Control For Linux SlCodesys Control For Linux Arm SlCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000 SlCodesys Control For Beaglebone Sl
5
CVSSv2
CVE-2020-15806
CODESYS Control runtime system prior to 3.5.16.10 allows Uncontrolled Memory Allocation.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control For Wago Touch Panels 600Codesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu ToolkitCodesys Simulation Runtime
NA
CVE-2022-47391
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
Codesys Hmi \\(sl\\)Codesys Control Win \\(sl\\)Codesys Control Runtime System ToolkitCodesys Control Rte \\(sl\\)Codesys Control Rte \\(for Beckhoff Cx\\) SlCodesys Control For Wago Touch Panels 600 SlCodesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Pfc200 SlCodesys Control For Pfc100 SlCodesys Control For Linux SlCodesys Control For Iot2000 SlCodesys Control For Empc-a\\/imx6 SlCodesys Control For Beaglebone Sl
NA
CVE-2022-22508
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote malicious user to block consecutive logins of a specific type.
Codesys Hmi \\(sl\\)Codesys Control Win \\(sl\\)Codesys Control Runtime System ToolkitCodesys Control Rte \\(sl\\)Codesys Control Rte \\(for Beckhoff Cx\\) SlCodesys Control For Wago Touch Panels 600 SlCodesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Pfc200 SlCodesys Control For Pfc100 SlCodesys Control For Linux SlCodesys Control For Iot2000 SlCodesys Control For Empc-a\\/imx6 SlCodesys Control For Beaglebone Sl
NA
CVE-2022-4046
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
Codesys Control For Beaglebone SlCodesys Control For Empc-a\\/imx6 SlCodesys Control For Iot2000 SlCodesys Control For Linux SlCodesys Control For Pfc100 SlCodesys Control For Pfc200 SlCodesys Control For Plcnext SlCodesys Control For Raspberry Pi SlCodesys Control For Wago Touch Panels 600 SlCodesys Control Rte SlCodesys Control Rte Sl \\(for Beckhoff Cx\\)Codesys Control Runtime System ToolkitCodesys Control Win SlCodesys Hmi Sl
NA
CVE-2023-37546
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-se...
Codesys Control For Empc-a\\/imx6 SlCodesys Control For Beaglebone SlCodesys Control For Wago Touch Panels 600 SlCodesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Pfc200 SlCodesys Control For Pfc100 SlCodesys Control For Linux SlCodesys Control For Iot2000 SlCodesys Control Rte Sl \\(for Beckhoff Cx\\)Codesys Safety Sil2Codesys HmiCodesys Development SystemCodesys Control Win SlCodesys Control Runtime System ToolkitCodesys Control Rte Sl
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook