Vulnerabilities > Codesys

DATE CVE VULNERABILITY TITLE RISK
2023-05-15 CVE-2022-47383 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47384 Out-of-bounds Write vulnerability in Codesys products
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47385 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47386 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47387 Out-of-bounds Write vulnerability in Codesys products
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47388 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47389 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47390 Out-of-bounds Write vulnerability in Codesys products
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
network
low complexity
codesys CWE-787
8.8
2023-05-15 CVE-2022-47391 Improper Input Validation vulnerability in Codesys products
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
network
low complexity
codesys CWE-20
7.5
2023-05-15 CVE-2022-4048 Inadequate Encryption Strength vulnerability in Codesys Development System V3
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
local
low complexity
codesys CWE-326
7.7