Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
codesys runtime toolkit vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2022-32138
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.
Codesys Runtime Toolkit
Codesys Plcwinnt
4
CVSSv2
CVE-2022-32139
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.
Codesys Runtime Toolkit
Codesys Plcwinnt
5
CVSSv2
CVE-2021-30186
CODESYS V2 runtime system SP prior to 2.4.7.55 has a Heap-based Buffer Overflow.
Codesys Plcwinnt
Codesys Runtime Toolkit
1 Github repository
5
CVSSv2
CVE-2021-30195
CODESYS V2 runtime system prior to 2.4.7.55 has Improper Input Validation.
Codesys Plcwinnt
Codesys Runtime Toolkit
5.5
CVSSv2
CVE-2022-1965
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
Codesys Runtime Toolkit
Codesys Plcwinnt
6.5
CVSSv2
CVE-2022-32137
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.
Codesys Runtime Toolkit
Codesys Plcwinnt
1 Github repository
5
CVSSv2
CVE-2021-33486
All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.
Codesys Runtime Toolkit
4.6
CVSSv2
CVE-2021-30187
CODESYS V2 runtime system SP prior to 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.
Codesys Runtime Toolkit
4
CVSSv2
CVE-2019-19789
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
Codesys Plcwinnt
Codesys Runtime Toolkit
Codesys Sp Realtime Nt
7.5
CVSSv2
CVE-2021-33485
CODESYS Control Runtime system prior to 3.5.17.10 has a Heap-based Buffer Overflow.
Codesys Control
Codesys Control Rte
Codesys Control Runtime System Toolkit
Codesys Control Win Sl
Codesys Embedded Target Visu Toolkit
Codesys Hmi
Codesys Remote Target Visu Toolkit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654
CVE-2023-49606
encryption
NULL pointer dereference
CVE-2024-4439
CVE-2024-4649
race condition
CVE-2024-27202
CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »