Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
codesys runtime toolkit vulnerabilities and exploits
(subscribe to this query)
490
VMScore
CVE-2022-32142
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which ...
Codesys Runtime Toolkit
Codesys Plcwinnt
578
VMScore
CVE-2022-32143
In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured on the controller or if remote attacker ...
Codesys Runtime Toolkit
Codesys Plcwinnt
445
VMScore
CVE-2021-30186
CODESYS V2 runtime system SP prior to 2.4.7.55 has a Heap-based Buffer Overflow.
Codesys Plcwinnt
Codesys Runtime Toolkit
1 Github repository
490
VMScore
CVE-2021-34595
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
Codesys Plcwinnt
Codesys Runtime Toolkit
356
VMScore
CVE-2022-32136
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.
Codesys Runtime Toolkit
Codesys Plcwinnt
356
VMScore
CVE-2022-32139
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.
Codesys Runtime Toolkit
Codesys Plcwinnt
445
VMScore
CVE-2021-33486
All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.
Codesys Runtime Toolkit
409
VMScore
CVE-2021-30187
CODESYS V2 runtime system SP prior to 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
Codesys Runtime Toolkit
356
VMScore
CVE-2019-19789
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
Codesys Sp Realtime Nt
Codesys Plcwinnt
Codesys Runtime Toolkit
668
VMScore
CVE-2021-33485
CODESYS Control Runtime system prior to 3.5.17.10 has a Heap-based Buffer Overflow.
Codesys Control Win Sl
Codesys Control Runtime System Toolkit
Codesys Embedded Target Visu Toolkit
Codesys Hmi
Codesys Remote Target Visu Toolkit
Codesys Control Rte
Codesys Control
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-37316
firmware
CVE-2024-30078
CVE-2024-5995
remote code execution
logic flaw
CVE-2024-20693
CVE-2024-37315
CVE-2024-5464
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »