Advisories · Technology
CODESYS Runtime Toolkit.
Every CVE that names CODESYS Runtime Toolkit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.7 High
Uncontrolled Memory Allocation in CODESYS Gateway Client
- CODESYS Development System 3
- CODESYS Gateway
- Denial of service
- CVSS 7.2 High
Improper Synchronization in Monitoring in CODESYS Control Runtime
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Race condition
- CVSS 8.7 High
Out-of-bounds Write in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1284
- CVSS 7.2 High
Incorrect Authorization in CODESYS Control
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
- CVSS 7.5 High
CODESYS Control Audit Log Format String DoS
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
- CVSS 8.8 High
CODESYS Control Boot Application Replacement Enables Code Execution
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-669
- CVSS 7.5 High
CODESYS Control - Invalid type usage in visualization
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Memory corruption
- CVSS 5.9 Medium
CODESYS Control - Linux/QNX SysSocket flaw
- CODESYS PLCHandler
- CODESYS Remote Target Visu
- Memory corruption
- CVSS 8.3 High
CODESYS Control PKI Exposure Enables Remote Certificate Access
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- Broken access control
- CVSS 5.5 Medium
CODESYS Toolkit Exposes Sensitive Files via Default Permissions
- CODESYS Runtime Toolkit
- CODESYS Control for BeagleBone SL
- Broken access control
- CVSS 6.6 Medium
CODESYS Control V3 removable media path traversal
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Path traversal
- CVSS 7.5 High
CODESYS Control V3 - OPC UA Server Authentication bypass
- CODESYS Runtime Toolkit
- Information disclosure
- CVSS 7.5 High
CODESYS: web server vulnerable to DoS
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- CWE-754
- CVSS 7.5 High
CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products
- CODESYS Control for BeagleBone SL
- CODESYS Control for emPC-A/iMX6 SL
- Memory corruption
- CVSS 8.8 High
CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
- CODESYS Control RTE (SL)
- CODESYS Control RTE (for Beckhoff CX) SL
- CWE-1188
- CVSS 8.8 High
CODESYS runtime system prone to directory acces
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- Information disclosure
- CVSS 8.1 High
CODESYS runtime system prone to denial of service due to use of out of range pointer
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-823
- CVSS 6.5 Medium
CODESYS runtime system prone to denial of service due to buffer over read
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-126
- CVSS 6.5 Medium
CODESYS runtime system prone to denial of service due to buffer copy
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- Memory corruption
- CVSS 6.5 Medium
CODESYS runtime system prone to denial of service due to out of bounds read
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- Memory corruption
- CVSS 8.8 High
CODESYS runtime system prone to denial of service due to Unexpected Sign Extension
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-194
- CVSS 8.8 High
CODESYS Runtime System prone to heap based buffer overflow
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- Memory corruption
- CVSS 6.5 Medium
Codesys runtime systems: Access of uninitialised pointer lead to denial of service.
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- Memory corruption
- CVSS 8.1 High
CODESYS runtime system prone to file deletion due to improper error handling
- CODESYS Runtime Toolkit
- CODESYS PLCWinNT
- CWE-755