|
2023-05-15
|
CVE-2022-47388
|
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47389
|
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47390
|
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47391
|
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
7.5
|
|
|
|
2023-05-15
|
CVE-2022-47392
|
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
6.5
|
|
|
|
2023-05-15
|
CVE-2022-47393
|
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
6.5
|
|
|
|
2020-01-24
|
CVE-2020-7052
|
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
|
Control_for_beaglebone, Control_for_empc\-A\/imx6, Control_for_iot2000, Control_for_linux, Control_for_pfc100, Control_for_pfc200, Control_for_plcnext, Control_for_raspberry_pi, Control_rte, Control_runtime_system_toolkit, Control_win, Gateway, Hmi, Safety_sil2, Simulation_runtime
|
6.5
|
|
|
|
2020-07-22
|
CVE-2020-15806
|
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
|
Control_for_beaglebone, Control_for_empc\-A\/imx6, Control_for_iot2000, Control_for_linux, Control_for_pfc100, Control_for_pfc200, Control_for_plcnext, Control_for_raspberry_pi, Control_for_wago_touch_panels_600, Control_rte, Control_runtime_system_toolkit, Control_win, Embedded_target_visu_toolkit, Hmi, Remote_target_visu_toolkit, Simulation_runtime
|
7.5
|
|
|
|
2021-05-03
|
CVE-2021-29241
|
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_raspberry_pi_sl, Control_runtime_system_toolkit, Development_system, Edge_gateway, Gateway
|
7.5
|
|
|
|
2021-05-03
|
CVE-2021-29242
|
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_arm_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte, Control_runtime_system_toolkit, Control_win, Edge_gateway, Embedded_target_visu_toolkit, Gateway, Hmi, Opc_server, Plchandler, Remote_target_visu_toolkit, Safety_sil, Simulation_runtime
|
7.3
|
|
|