Vulnerabilities > Codesys > Medium

DATE CVE VULNERABILITY TITLE RISK
2020-01-24 CVE-2020-7052 Allocation of Resources Without Limits or Throttling vulnerability in Codesys products
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
network
low complexity
codesys CWE-770
6.5
2019-12-20 CVE-2019-19789 NULL Pointer Dereference vulnerability in Codesys Plcwinnt, Runtime Toolkit and SP Realtime NT
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
network
low complexity
codesys CWE-476
6.5
2019-09-17 CVE-2019-13542 NULL Pointer Dereference vulnerability in Codesys products
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.
network
low complexity
codesys CWE-476
6.5