Advisories · Technology

CODESYS Control for WAGO Touch Panels 600 SL.

Every CVE that names CODESYS Control for WAGO Touch Panels 600 SL among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-79625 CVE record

CVSS 7.2 High

Improper Synchronization in Monitoring in CODESYS Control Runtime
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Race condition
Not analysed yet 30 Sept 2026
CVE-2026-8047 CVE record

CVSS 8.7 High

Out-of-bounds Write in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1284
Not analysed yet 26 May 2026
CVE-2026-8046 CVE record

CVSS 7.2 High

Incorrect Authorization in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
Not analysed yet 26 May 2026
CVE-2026-3509 CVE record

CVSS 7.5 High

CODESYS Control Audit Log Format String DoS
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 24 Mar 2026
CVE-2025-41660 CVE record

CVSS 8.8 High

CODESYS Control Boot Application Replacement Enables Code Execution
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-669
Not analysed yet 24 Mar 2026
CVE-2025-41738 CVE record

CVSS 7.5 High

CODESYS Control - Invalid type usage in visualization
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 1 Dec 2025
CVE-2025-41739 CVE record

CVSS 5.9 Medium

CODESYS Control - Linux/QNX SysSocket flaw
- CODESYS PLCHandler
- CODESYS Remote Target Visu
- Memory corruption
Not analysed yet 1 Dec 2025
CVE-2025-41691 CVE record

CVSS 7.5 High

CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 4 Aug 2025
CVE-2025-41659 CVE record

CVSS 8.3 High

CODESYS Control PKI Exposure Enables Remote Certificate Access
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
Not analysed yet 4 Aug 2025
CVE-2025-41658 CVE record

CVSS 5.5 Medium

CODESYS Toolkit Exposes Sensitive Files via Default Permissions
- CODESYS Runtime Toolkit
- CODESYS Control for BeagleBone SL
- Broken access control
Not analysed yet 4 Aug 2025
CVE-2025-0694 CVE record

CVSS 6.6 Medium

CODESYS Control V3 removable media path traversal
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Path traversal
Not analysed yet 18 Mar 2025
CVE-2024-8175 CVE record

CVSS 7.5 High

CODESYS: web server vulnerable to DoS
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-754
Not analysed yet 25 Sept 2024
CVE-2024-5000 CVE record

CVSS 7.5 High

CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 4 Jun 2024
CVE-2023-6357 CVE record

CVSS 8.8 High

OS Command Injection in multiple CODESYS products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Command injection
Not analysed yet 5 Dec 2023
CVE-2022-4046 CVE record

CVSS 8.8 High

CODESYS: Improper memory restrictions fro CODESYS Control
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-37559 CVE record

CVSS 6.5 Medium

CODESYS Improper Validation of Consistency within Input in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37558 CVE record

CVSS 6.5 Medium

CODESYS Improper Validation of Consistency within Input in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37557 CVE record

CVSS 6.5 Medium

CODESYS Heap-based Buffer Overflow in multiple products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
Not analysed yet 3 Aug 2023
CVE-2023-37556 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37555 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37554 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37553 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37552 CVE record

CVSS 6.5 Medium

CODESYS Improper Input Validation in CmpAppBP
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37551 CVE record

CVSS 6.5 Medium

CODESYS Files or Directories Accessible to External Parties in CmpApp
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Information disclosure
Not analysed yet 3 Aug 2023
CVE-2023-37550 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37549 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37548 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37547 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37546 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2023-37545 CVE record

CVSS 6.5 Medium

CODESYS: Improper Input Validation in CmpApp component
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-20
Not analysed yet 3 Aug 2023
CVE-2022-47393 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to improperly restricted memory operations
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47392 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-47391 CVE record

CVSS 7.5 High

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-47390 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47389 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47388 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47387 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47386 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47385 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47384 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47383 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47382 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47381 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47380 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47379 CVE record

CVSS 8.8 High

CODESYS: Multiple products prone to out-of-bounds write
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 15 May 2023
CVE-2022-47378 CVE record

CVSS 6.5 Medium

CODESYS: Multiple products prone to Improper Input Validation
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-20
Not analysed yet 15 May 2023
CVE-2022-4224 CVE record

CVSS 8.8 High

CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1188
Not analysed yet 23 Mar 2023
CVE-2022-30792 CVE record

CVSS 7.5 High

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
Not analysed yet 11 Jul 2022
CVE-2022-30791 CVE record

CVSS 7.5 High

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
Not analysed yet 11 Jul 2022
CVE-2022-22519 CVE record

CVSS 7.5 High

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-126
Not analysed yet 7 Apr 2022
CVE-2022-22518 CVE record

CVSS 6.5 Medium

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
- CODESYS Control for BeagleBone SL
- CODESYS Control for Beckhoff CX9020 SL
- Broken access control
Not analysed yet 7 Apr 2022
CVE-2022-22517 CVE record

CVSS 7.5 High

Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-334
Not analysed yet 7 Apr 2022
CVE-2022-22515 CVE record

CVSS 8.1 High

A component of the CODESYS Control runtime system allows read and write access to configuration files
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Information disclosure
Not analysed yet 7 Apr 2022
CVE-2022-22514 CVE record

CVSS 7.1 High

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 7 Apr 2022
CVE-2022-22513 CVE record

CVSS 6.5 Medium

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
Not analysed yet 7 Apr 2022