codesys edge gateway vulnerabilities and exploits

(subscribe to this query)

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Codesys Runtime Toolkit Codesys Plcwinnt Codesys Plchandler Codesys Opc Server Codesys Edge Gateway Codesys Hmi Sl Codesys Sp Realtime Nt Codesys Web Server Codesys Gateway Codesys Development System

1 Github repository

CODESYS Gateway 3 prior to 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Codesys Control For Beaglebone Sl Codesys Control For Empc-a\\/imx6 Sl Codesys Control For Iot2000 Sl Codesys Control For Linux Sl Codesys Control For Pfc100 Sl Codesys Control For Pfc200 Sl Codesys Control For Raspberry Pi Sl Codesys Control Runtime System Toolkit Codesys Development System Codesys Edge Gateway Codesys Gateway

CODESYS Control Runtime system prior to 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be ...

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker ...

Codesys Codesys 3.5.13.2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook