Advisories · Technology
CODESYS Embedded Target Visu Toolkit.
Every CVE that names CODESYS Embedded Target Visu Toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
CODESYS: web server vulnerable to DoS
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-754
- CVSS 7.5 High
CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
- CVSS 7.5 High
CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Denial of service
- CVSS 7.5 High
Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-126
- CVSS 7.5 High
Communication Components in multiple CODESYS products vulnerable to communication channel disruption
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-334
- CVSS 8.1 High
A component of the CODESYS Control runtime system allows read and write access to configuration files
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Information disclosure
- CVSS 7.1 High
Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
- CVSS 6.5 Medium
Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption