Control Runtime Toolkit

DATE	CVE	VULNERABILITY TITLE	RISK
2019-08-15	CVE-2019-9012	Allocation of Resources Without Limits or Throttling vulnerability in Codesys products An issue was discovered in 3S-Smart CODESYS V3 products. network low complexity codesys CWE-770	7.5
2019-08-15	CVE-2019-9010	Unspecified vulnerability in Codesys products An issue was discovered in 3S-Smart CODESYS V3 products. network low complexity codesys critical	9.8
2019-02-19	CVE-2018-20026	Unspecified vulnerability in Codesys products Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. network low complexity codesys	7.5
2019-02-19	CVE-2018-20025	Use of Insufficiently Random Values vulnerability in Codesys products Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. network low complexity codesys CWE-330	7.5
2019-01-29	CVE-2018-10612	Incorrect Permission Assignment for Critical Resource vulnerability in Codesys products In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, including user credentials. network low complexity codesys CWE-732 critical	9.8