Vulnerabilities > Codesys

DATE CVE VULNERABILITY TITLE RISK
2020-07-22 CVE-2020-15806 Allocation of Resources Without Limits OR Throttling vulnerability in Codesys products
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
network
low complexity
codesys CWE-770
5.0
2020-05-14 CVE-2020-12068 Improper Privilege Management vulnerability in Codesys products
An issue was discovered in CODESYS Development System before 3.5.16.0.
network
low complexity
codesys CWE-269
6.4
2020-05-07 CVE-2020-6081 Insufficient Verification of Data Authenticity vulnerability in Codesys Runtime 3.5.14.30
An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30.
network
low complexity
codesys CWE-345
6.5
2020-03-26 CVE-2019-5105 Out-Of-Bounds Write vulnerability in Codesys 3.5.13.2
An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService 3.5.13.20.
network
low complexity
codesys CWE-787
5.0
2020-03-26 CVE-2020-10245 Out-Of-Bounds Write vulnerability in Codesys products
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
network
low complexity
codesys CWE-787
critical
10.0
2020-01-24 CVE-2020-7052 Resource Exhaustion vulnerability in Codesys products
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
network
low complexity
codesys CWE-400
4.0
2019-12-20 CVE-2019-19789 Null Pointer Dereference vulnerability in Codesys Plcwinnt, Runtime Toolkit and SP Realtime NT
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
network
low complexity
codesys CWE-476
4.0
2019-11-20 CVE-2019-18858 Classic Buffer Overflow vulnerability in Codesys products
CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
network
low complexity
codesys CWE-120
7.5
2019-10-25 CVE-2019-16265 Out-Of-Bounds Write vulnerability in Codesys and ENI Server
CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.
network
low complexity
codesys CWE-787
7.5
2019-09-17 CVE-2019-13538 Cross-Site Scripting vulnerability in Codesys 2.3/2.3.9.61/3.5.13.2
3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed.
network
codesys CWE-79
6.8