TI-2019-06497 CVE-2019-9010 · GHSA-ppm6-8p65-j9xg
An issue was discovered in 3S-Smart CODESYS V3 products.
Priority MEDIUM 46
An issue was discovered in 3S-Smart CODESYS V3 products.
CODESYS
Records156All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high95CVSS 7.0–8.9
Exploited now
CODESYS records in CISA KEVNo CODESYS vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
18 records in Gateway · all components
TI-2022-13694 CVE-2022-31802 · GHSA-jp8v-m2cx-q392
Partial string comparison in CODESYS gateway server
Priority MEDIUM 45
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password.
TI-2021-10055 CVE-2021-29241 · GHSA-2hc4-qjj9-7p6r
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
Priority MEDIUM 42
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
TI-2018-14204 CVE-2018-20026 · GHSA-mxhm-4cg3-5h2j
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
Priority LOW 39
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
TI-2018-14203 CVE-2018-20025 · GHSA-j29p-v539-8x23
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
Priority LOW 38
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
TI-2019-06499 CVE-2019-9012 · GHSA-q2jg-8rwm-9rgx
An issue was discovered in 3S-Smart CODESYS V3 products.
Priority LOW 37
An issue was discovered in 3S-Smart CODESYS V3 products.
TI-2019-06496 CVE-2019-9009 · GHSA-5q4m-ggr9-2rqh
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 .
Priority LOW 37
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 .
TI-2022-06793 CVE-2022-22517 · GHSA-95jh-v98h-7gww
Communication Components in multiple CODESYS products vulnerable to communication channel disruption
Priority LOW 36
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.
TI-2022-13697 CVE-2022-31805 · GHSA-q837-53gv-8r7r
Insecure transmission of credentials in CODESYS Development System
Priority LOW 35
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
TI-2022-13696 CVE-2022-31804 · GHSA-qhgm-4r4g-j663
CODESYS Gateway server prone to denial of service attack due to excessive memory allocation
Priority LOW 35
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits.
TI-2022-12921 CVE-2022-30792 · GHSA-mr6x-v529-vfj8
Uncontrolled resource consumption in CODESYS Control RTE
Priority LOW 35
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections.
TI-2022-12920 CVE-2022-30791 · GHSA-cxc2-v3v8-ggcp
CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
Priority LOW 35
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections.
TI-2021-14886 CVE-2021-36764 · GHSA-qpw7-wx2f-6gc3
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference.
Priority LOW 35
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference.
TI-2021-10056 CVE-2021-29242 · GHSA-85g9-hgxq-755v
CODESYS Control Runtime system before 3.5.17.0 has improper input validation.
Priority LOW 35
CODESYS Control Runtime system before 3.5.17.0 has improper input validation.
TI-2022-06790 CVE-2022-22514 · GHSA-5j8x-4qfw-cwj9
Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
Priority LOW 33
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request.
TI-2020-05692 CVE-2020-7052 · GHSA-6627-xq79-x5q7
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory…
Priority LOW 33
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
TI-2022-06789 CVE-2022-22513 · GHSA-4555-4gmg-wpcm
Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
Priority LOW 31
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
TI-2022-13695 CVE-2022-31803 · GHSA-9348-vpwc-ch78
CODESYS Gateway Server V2 prone to Denial of Service Attack
Priority LOW 26
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from estab…