Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

codesys control runtime system toolkit vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2018-25048
The CODESYS runtime system in multiple versions allows an remote low privileged malicious user to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
Codesys Runtime PlcwinntCodesys Remote Target Visu ToolkitCodesys Embedded Target Visu ToolkitCodesys Runtime System ToolkitCodesys Runtime System Toolkit 3.5.15.0Codesys Control V3 Runtime System ToolkitCodesys Simulation RuntimeCodesys Control WinCodesys Control RteCodesys HmiCodesys Control For Raspberry PiCodesys Control For Pfc200Codesys Control For Pfc100Codesys Control For Iot2000Codesys Control For Empc-a\\/imx6Codesys Control For Beaglebone
7.5
CVSSv2
CVE-2021-33485
CODESYS Control Runtime system prior to 3.5.17.10 has a Heap-based Buffer Overflow.
Codesys ControlCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control Win SlCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
5
CVSSv2
CVE-2021-36763
In CODESYS V3 web server prior to 3.5.17.10, files or directories are accessible to External Parties.
Codesys ControlCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control Win SlCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
5
CVSSv2
CVE-2020-15806
CODESYS Control runtime system prior to 3.5.16.10 allows Uncontrolled Memory Allocation.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control For Wago Touch Panels 600Codesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu ToolkitCodesys Simulation Runtime
5
CVSSv2
CVE-2019-13532
CODESYS V3 web server, all versions before 3.5.14.10, allows an malicious user to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
Codesys Control For Empc-a\\/imx6Codesys Control For Raspberry PiCodesys Control RteCodesys Remote Target Visu ToolkitCodesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Control For BeagleboneCodesys Control Runtime System Toolkit
7.5
CVSSv2
CVE-2019-13548
CODESYS V3 web server, all versions before 3.5.14.10, allows an malicious user to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
Codesys Control For BeagleboneCodesys Control RteCodesys Control Runtime System ToolkitCodesys HmiCodesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control WinCodesys Embedded Target Visu ToolkitCodesys Control For Empc-a\\/imx6Codesys Control For Raspberry PiCodesys Remote Target Visu Toolkit
10
CVSSv2
CVE-2020-10245
CODESYS V3 web server prior to 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
7.5
CVSSv2
CVE-2019-18858
CODESYS 3 web server prior to 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For LinuxCodesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Embedded Target Visu ToolkitCodesys HmiCodesys Remote Target Visu Toolkit
5
CVSSv2
CVE-2019-9009
An issue exists in 3S-Smart CODESYS prior to 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
Codesys Control For Iot2000Codesys Control For Pfc100Codesys Control For Pfc200Codesys Control For Raspberry PiCodesys GatewayCodesys HmiCodesys Safety Sil2Codesys Control For Empc-a\\/imx6Codesys Control RteCodesys LinuxCodesys Simulation RuntimeCodesys Control For BeagleboneCodesys Control WinCodesys Runtime System Toolkit
6.4
CVSSv2
CVE-2020-12068
An issue exists in CODESYS Development System prior to 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Codesys Control For BeagleboneCodesys Control For Empc-a\\/imx6Codesys Control For Iot2000Codesys Control For Pfc100Codesys Control For Pfc200Codesys Control For PlcnextCodesys Control For Raspberry PiCodesys Control RteCodesys Control Runtime System ToolkitCodesys Control WinCodesys Development SystemCodesys Hmi
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook