# CODESYS Control for WAGO Touch Panels 600 SL.

Every CVE that names CODESYS Control for WAGO Touch Panels 600 SL among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Improper Synchronization in Monitoring in CODESYS Control Runtime](https://agentprime.io/advisories/CVE-2026-79625.md)
  `CVE-2026-79625` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 7.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Race condition
- [Out-of-bounds Write in CODESYS Control](https://agentprime.io/advisories/CVE-2026-8047.md)
  `CVE-2026-8047` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.7 High · Not analysed yet · Published 26 May 2026 · Tags: CWE-1284
- [Incorrect Authorization in CODESYS Control](https://agentprime.io/advisories/CVE-2026-8046.md)
  `CVE-2026-8046` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.2 High · Not analysed yet · Published 26 May 2026 · Tags: Broken access control
- [CODESYS Control Audit Log Format String DoS](https://agentprime.io/advisories/CVE-2026-3509.md)
  `CVE-2026-3509` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption
- [CODESYS Control Boot Application Replacement Enables Code Execution](https://agentprime.io/advisories/CVE-2025-41660.md)
  `CVE-2025-41660` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: CWE-669
- [CODESYS Control - Invalid type usage in visualization](https://agentprime.io/advisories/CVE-2025-41738.md)
  `CVE-2025-41738` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 1 Dec 2025 · Tags: Memory corruption
- [CODESYS Control - Linux/QNX SysSocket flaw](https://agentprime.io/advisories/CVE-2025-41739.md)
  `CVE-2025-41739` · CVE record: CODESYS CODESYS PLCHandler and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 1 Dec 2025 · Tags: Memory corruption
- [CODESYS Control DoS via Unauthenticated NULL Pointer Dereference](https://agentprime.io/advisories/CVE-2025-41691.md)
  `CVE-2025-41691` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Aug 2025 · Tags: Memory corruption
- [CODESYS Control PKI Exposure Enables Remote Certificate Access](https://agentprime.io/advisories/CVE-2025-41659.md)
  `CVE-2025-41659` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 8.3 High · Not analysed yet · Published 4 Aug 2025 · Tags: Broken access control
- [CODESYS Toolkit Exposes Sensitive Files via Default Permissions](https://agentprime.io/advisories/CVE-2025-41658.md)
  `CVE-2025-41658` · CVE record: CODESYS Runtime Toolkit and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 4 Aug 2025 · Tags: Broken access control
- [CODESYS Control V3 removable media path traversal](https://agentprime.io/advisories/CVE-2025-0694.md)
  `CVE-2025-0694` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.6 Medium · Not analysed yet · Published 18 Mar 2025 · Tags: Path traversal
- [CODESYS: web server vulnerable to DoS](https://agentprime.io/advisories/CVE-2024-8175.md)
  `CVE-2024-8175` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 7.5 High · Not analysed yet · Published 25 Sept 2024 · Tags: CWE-754
- [CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products](https://agentprime.io/advisories/CVE-2024-5000.md)
  `CVE-2024-5000` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Jun 2024 · Tags: Memory corruption
- [OS Command Injection in multiple CODESYS products](https://agentprime.io/advisories/CVE-2023-6357.md)
  `CVE-2023-6357` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 8.8 High · Not analysed yet · Published 5 Dec 2023 · Tags: Command injection
- [CODESYS: Improper memory restrictions fro CODESYS Control](https://agentprime.io/advisories/CVE-2022-4046.md)
  `CVE-2022-4046` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 8.8 High · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [CODESYS Improper Validation of Consistency within Input in multiple products](https://agentprime.io/advisories/CVE-2023-37559.md)
  `CVE-2023-37559` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Improper Validation of Consistency within Input in multiple products](https://agentprime.io/advisories/CVE-2023-37558.md)
  `CVE-2023-37558` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Heap-based Buffer Overflow in multiple products](https://agentprime.io/advisories/CVE-2023-37557.md)
  `CVE-2023-37557` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Memory corruption
- [CODESYS Improper Input Validation in CmpAppBP](https://agentprime.io/advisories/CVE-2023-37556.md)
  `CVE-2023-37556` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Improper Input Validation in CmpAppBP](https://agentprime.io/advisories/CVE-2023-37555.md)
  `CVE-2023-37555` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Improper Input Validation in CmpAppBP](https://agentprime.io/advisories/CVE-2023-37554.md)
  `CVE-2023-37554` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Improper Input Validation in CmpAppBP](https://agentprime.io/advisories/CVE-2023-37553.md)
  `CVE-2023-37553` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Improper Input Validation in CmpAppBP](https://agentprime.io/advisories/CVE-2023-37552.md)
  `CVE-2023-37552` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS Files or Directories Accessible to External Parties in CmpApp](https://agentprime.io/advisories/CVE-2023-37551.md)
  `CVE-2023-37551` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: Information disclosure
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37550.md)
  `CVE-2023-37550` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37549.md)
  `CVE-2023-37549` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37548.md)
  `CVE-2023-37548` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37547.md)
  `CVE-2023-37547` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37546.md)
  `CVE-2023-37546` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Improper Input Validation in CmpApp component](https://agentprime.io/advisories/CVE-2023-37545.md)
  `CVE-2023-37545` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Aug 2023 · Tags: CWE-20
- [CODESYS: Multiple products prone to improperly restricted memory operations](https://agentprime.io/advisories/CVE-2022-47393.md)
  `CVE-2022-47393` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to Improper Input Validation](https://agentprime.io/advisories/CVE-2022-47392.md)
  `CVE-2022-47392` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-20
- [CODESYS: Multiple products prone to Improper Input Validation](https://agentprime.io/advisories/CVE-2022-47391.md)
  `CVE-2022-47391` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 15 May 2023 · Tags: CWE-20
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47390.md)
  `CVE-2022-47390` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47389.md)
  `CVE-2022-47389` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47388.md)
  `CVE-2022-47388` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47387.md)
  `CVE-2022-47387` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47386.md)
  `CVE-2022-47386` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47385.md)
  `CVE-2022-47385` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47384.md)
  `CVE-2022-47384` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47383.md)
  `CVE-2022-47383` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47382.md)
  `CVE-2022-47382` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to stack based out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47381.md)
  `CVE-2022-47381` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47380.md)
  `CVE-2022-47380` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to out-of-bounds write](https://agentprime.io/advisories/CVE-2022-47379.md)
  `CVE-2022-47379` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 15 May 2023 · Tags: Memory corruption
- [CODESYS: Multiple products prone to Improper Input Validation](https://agentprime.io/advisories/CVE-2022-47378.md)
  `CVE-2022-47378` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 15 May 2023 · Tags: CWE-20
- [CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3](https://agentprime.io/advisories/CVE-2022-4224.md)
  `CVE-2022-4224` · CVE record: CODESYS Control RTE (SL) and 4 more · CVSS 8.8 High · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-1188
- [CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels](https://agentprime.io/advisories/CVE-2022-30792.md)
  `CVE-2022-30792` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2022 · Tags: Denial of service
- [CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections](https://agentprime.io/advisories/CVE-2022-30791.md)
  `CVE-2022-30791` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2022 · Tags: Denial of service
- [Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.](https://agentprime.io/advisories/CVE-2022-22519.md)
  `CVE-2022-22519` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2022 · Tags: CWE-126
- [A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.](https://agentprime.io/advisories/CVE-2022-22518.md)
  `CVE-2022-22518` · CVE record: CODESYS CODESYS Control for BeagleBone SL and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Apr 2022 · Tags: Broken access control
- [Communication Components in multiple CODESYS products vulnerable to communication channel disruption](https://agentprime.io/advisories/CVE-2022-22517.md)
  `CVE-2022-22517` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2022 · Tags: CWE-334
- [A component of the CODESYS Control runtime system allows read and write access to configuration files](https://agentprime.io/advisories/CVE-2022-22515.md)
  `CVE-2022-22515` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 8.1 High · Not analysed yet · Published 7 Apr 2022 · Tags: Information disclosure
- [Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.](https://agentprime.io/advisories/CVE-2022-22514.md)
  `CVE-2022-22514` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 7.1 High · Not analysed yet · Published 7 Apr 2022 · Tags: Memory corruption
- [Null Pointer Dereference in multiple CODESYS products can lead to a DoS.](https://agentprime.io/advisories/CVE-2022-22513.md)
  `CVE-2022-22513` · CVE record: CODESYS CODESYS Control RTE (SL) and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Apr 2022 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=codesys-control-for-wago-touch-panels-600-sl>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/codesys-control-for-wago-touch-panels-600-sl/>. Everything for agents: <https://agentprime.io/llms.txt>.