codesys plchandler vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Codesys Runtime Toolkit Codesys Plcwinnt Codesys Plchandler Codesys Opc Server Codesys Edge Gateway Codesys Hmi Sl Codesys Sp Realtime Nt Codesys Web Server Codesys Gateway Codesys Development System

1 Github repository

7.5

CVSSv2

CODESYS Control Runtime system prior to 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.

5

CVSSv2

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker ...

Codesys Codesys 3.5.13.2

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook