Vulnerabilities > Codesys
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-14 | CVE-2020-12068 | Unspecified vulnerability in Codesys products An issue was discovered in CODESYS Development System before 3.5.16.0. | 6.5 |
| 2020-05-07 | CVE-2020-6081 | Insufficient Verification of Data Authenticity vulnerability in Codesys Runtime 3.5.14.30 An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. | 8.8 |
| 2020-03-26 | CVE-2019-5105 | Out-of-bounds Write vulnerability in Codesys 3.5.13.2 An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. | 7.5 |
| 2020-03-26 | CVE-2020-10245 | Out-of-bounds Write vulnerability in Codesys products CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. | 9.8 |
| 2020-01-24 | CVE-2020-7052 | Allocation of Resources Without Limits or Throttling vulnerability in Codesys products CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. | 6.5 |
| 2019-12-20 | CVE-2019-19789 | NULL Pointer Dereference vulnerability in Codesys Plcwinnt, Runtime Toolkit and SP Realtime NT 3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference. | 6.5 |
| 2019-11-20 | CVE-2019-18858 | Classic Buffer Overflow vulnerability in Codesys products CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. | 9.8 |
| 2019-10-25 | CVE-2019-16265 | Out-of-bounds Write vulnerability in Codesys and ENI Server CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow. | 9.8 |
| 2019-09-17 | CVE-2019-13538 | Cross-site Scripting vulnerability in Codesys 3S-Smart Software Solutions GmbH CODESYS V3 Library Manager, all versions prior to 3.5.16.0, allows the system to display active library content without checking its validity, which may allow the contents of manipulated libraries to be displayed or executed. | 8.6 |
| 2019-09-17 | CVE-2019-13542 | NULL Pointer Dereference vulnerability in Codesys products 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition. | 6.5 |