Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 149

Export CSV
CVE-2023-37548

CODESYS: Improper Input Validation in CmpApp component

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37547, CVE-2023-37549 and CVE-2023-37550

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Empc-a\/imx6 Sl Control For Iot2000 Sl and 13 more
CVE-2023-37547

CODESYS: Improper Input Validation in CmpApp component

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37546, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Empc-a\/imx6 Sl Control For Iot2000 Sl and 13 more
CVE-2023-37546

CODESYS: Improper Input Validation in CmpApp component

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37545, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549 and CVE-2023-37550

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Empc-a\/imx6 Sl Control For Iot2000 Sl and 13 more
CVE-2023-37545

CODESYS: Improper Input Validation in CmpApp component

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37546, CVE-2023-37547, CVE-2023-37548, CVE-2023-37549, CVE-2023-37550

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Empc-a\/imx6 Sl Control For Iot2000 Sl and 13 more
CVE-2022-32143

CODESYS runtime system prone to directory acces

In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured on the controller or if remote attacker has previously successfully authenticated himself to the controller. A successful Attack may lead to a denial of service, change of local files, or drain of confidential Information. User interaction is not required

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32142

CODESYS runtime system prone to denial of service due to use of out of range pointer

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

CVSS 3.1 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32141

CODESYS runtime system prone to denial of service due to buffer over read

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32140

CODESYS runtime system prone to denial of service due to buffer copy

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32139

CODESYS runtime system prone to denial of service due to out of bounds read

In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32138

CODESYS runtime system prone to denial of service due to Unexpected Sign Extension

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

CVSS 3.1 · 8.8 High EPSS 1.2% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32137

CODESYS Runtime System prone to heap based buffer overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-32136

Codesys runtime systems: Access of uninitialised pointer lead to denial of service.

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-31806

Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Codesys
Products
Plcwinnt Runtime Toolkit
CVE-2022-31805

Insecure transmission of credentials

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Codesys
Products
Development System Edge Gateway Gateway and 7 more
CVE-2022-31804

CODESYS Gateway server prone to denial of service attack due to excessive memory allocation

The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Codesys
Products
Gateway
CVE-2022-31803

CODESYS Gateway Server V2 prone to Denial of Service Attack

In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.

CVSS 3.1 · 5.3 Medium EPSS 1.2% KEV · Not listed
Vendors
Codesys
Products
Gateway
CVE-2022-31802

Partial string comparison in CODESYS gateway server

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Codesys
Products
Gateway
CVE-2022-30792

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Control For Empc-a\/imx6 Control For Iot2000 Sl and 16 more