Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
codesys vulnerabilities and exploits
(subscribe to this query)
7.8
CVSSv3
CVE-2022-22516
The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.
Codesys Control Rte Sl
Codesys Control Rte Sl \\(for Beckhoff Cx\\)
Codesys Control Win Sl
Codesys Development System
7.8
CVSSv3
CVE-2021-21869
An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious fil...
Codesys Codesys 3.5.17.0
Codesys Codesys 3.5.16.0
7.8
CVSSv3
CVE-2021-21867
An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicio...
Codesys Codesys 3.5.17.0
Codesys Codesys 3.5.16.0
7.8
CVSSv3
CVE-2021-21868
An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious ...
Codesys Codesys 3.5.17.0
Codesys Codesys 3.5.16.0
7.8
CVSSv3
CVE-2021-21863
A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger...
Codesys Development System 3.5.16.0
Codesys Development System 3.5.17.0
7.8
CVSSv3
CVE-2021-21864
A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a mali...
Codesys Development System 3.5.16.0
Codesys Development System 3.5.17.0
7.8
CVSSv3
CVE-2021-21865
A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to tr...
Codesys Development System 3.5.16.0
Codesys Development System 3.5.17.0
7.8
CVSSv3
CVE-2021-21866
A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicio...
Codesys Development System 3.5.16.0
Codesys Development System 3.5.17.0
7.8
CVSSv3
CVE-2021-29240
The Package Manager of CODESYS Development System 3 prior to 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.
7.8
CVSSv3
CVE-2021-29239
CODESYS Development System 3 prior to 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity.
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22120
CVE-2024-35921
CVE-2024-35874
brute force
CVE-2024-36080
unprivileged
CVE-2024-35917
IDOR
CVE-2024-4947
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »