Advisories · Technology
CODESYS Control for Beckhoff CX9020 SL.
Every CVE that names CODESYS Control for Beckhoff CX9020 SL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
- CVSS 7.5 High
CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
- CVSS 7.5 High
Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-126
- CVSS 6.5 Medium
A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
- CODESYS Control for BeagleBone SL
- CODESYS Control for Beckhoff CX9020 SL
- Broken access control
- CVSS 7.5 High
Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-334
- CVSS 8.1 High
A component of the CODESYS Control runtime system allows read and write access to configuration files
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Information disclosure
- CVSS 7.1 High
Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
- CVSS 6.5 Medium
Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption