Advisories · Technology

CODESYS Control for IOT2000 SL.

Every CVE that names CODESYS Control for IOT2000 SL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-79625 CVE record

CVSS 7.2 High

Improper Synchronization in Monitoring in CODESYS Control Runtime
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Race condition
Not analysed yet 30 Sept 2026
CVE-2026-8047 CVE record

CVSS 8.7 High

Out-of-bounds Write in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1284
Not analysed yet 26 May 2026
CVE-2026-8046 CVE record

CVSS 7.2 High

Incorrect Authorization in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
Not analysed yet 26 May 2026
CVE-2026-3509 CVE record

CVSS 7.5 High

CODESYS Control Audit Log Format String DoS
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2025-41660 CVE record

CVSS 8.8 High

CODESYS Control Boot Application Replacement Enables Code Execution
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-669
Not analysed yet 24 Mar 2026
CVE-2025-41738 CVE record

CVSS 7.5 High

CODESYS Control - Invalid type usage in visualization
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 1 Dec 2025
CVE-2025-41739 CVE record

CVSS 5.9 Medium

CODESYS Control - Linux/QNX SysSocket flaw
- CODESYS PLCHandler
- CODESYS Remote Target Visu
- Memory corruption
Not analysed yet 1 Dec 2025
CVE-2025-41691 CVE record

CVSS 7.5 High

CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 4 Aug 2025
CVE-2025-41659 CVE record

CVSS 8.3 High

CODESYS Control PKI Exposure Enables Remote Certificate Access
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
Not analysed yet 4 Aug 2025
CVE-2025-41658 CVE record

CVSS 5.5 Medium

CODESYS Toolkit Exposes Sensitive Files via Default Permissions
- CODESYS Runtime Toolkit
- CODESYS Control for BeagleBone SL
- Broken access control
Not analysed yet 4 Aug 2025
CVE-2025-0694 CVE record

CVSS 6.6 Medium

CODESYS Control V3 removable media path traversal
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Path traversal
Not analysed yet 18 Mar 2025
CVE-2024-8175 CVE record

CVSS 7.5 High

CODESYS: web server vulnerable to DoS
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-754
Not analysed yet 25 Sept 2024
CVE-2024-5000 CVE record

CVSS 7.5 High

CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 4 Jun 2024
CVE-2023-6357 CVE record

CVSS 8.8 High

OS Command Injection in multiple CODESYS products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Command injection
Not analysed yet 5 Dec 2023
CVE-2022-4046 CVE record

CVSS 8.8 High

CODESYS: Improper memory restrictions fro CODESYS Control
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-37559 CVE record

CVSS 6.5 Medium

CODESYS Improper Validation of Consistency within Input in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37558 CVE record

CVSS 6.5 Medium

CODESYS Improper Validation of Consistency within Input in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37557 CVE record

CVSS 6.5 Medium

CODESYS Heap-based Buffer Overflow in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-37556 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37555 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37554 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37553 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37552 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37551 CVE record

CVSS 6.5 Medium

CODESYS Files or Directories Accessible to External Parties in CmpApp
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Information disclosure
Not analysed yet 3 Aug 2023
CVE-2023-37550 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37549 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37548 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37547 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37546 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37545 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2022-47393 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to improperly restricted memory operations
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47392 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-47391 CVE record

CVSS 7.5 High

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-47390 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47389 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47388 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47387 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47386 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47385 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47384 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47383 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47382 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47381 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47380 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47379 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47378 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-4224 CVE record

CVSS 8.8 High

CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1188
Not analysed yet 23 Mar 2023
CVE-2022-30792 CVE record

CVSS 7.5 High

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
Not analysed yet 11 Jul 2022
CVE-2022-30791 CVE record

CVSS 7.5 High

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
Not analysed yet 11 Jul 2022
CVE-2022-22519 CVE record

CVSS 7.5 High

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-126
Not analysed yet 7 Apr 2022
CVE-2022-22518 CVE record

CVSS 6.5 Medium

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
- CODESYS Control for BeagleBone SL
- CODESYS Control for Beckhoff CX9020 SL
- Broken access control
Not analysed yet 7 Apr 2022
CVE-2022-22517 CVE record

CVSS 7.5 High

Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-334
Not analysed yet 7 Apr 2022
CVE-2022-22515 CVE record

CVSS 8.1 High

A component of the CODESYS Control runtime system allows read and write access to configuration files
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Information disclosure
Not analysed yet 7 Apr 2022
CVE-2022-22514 CVE record

CVSS 7.1 High

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 7 Apr 2022
CVE-2022-22513 CVE record

CVSS 6.5 Medium

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 7 Apr 2022