Priority LOW 35
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00894 · Published 2022-07-11 · Fixed in V3.5.18.20, V3.5.18.10 +1 CWE-400
Priority LOW 35
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00894 · Published 2022-07-11 · Fixed in V3.5.18.20, V3.5.18.10 +1 CWE-400
Priority LOW 35
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01046 · Published 2022-06-24 · Fixed in V2.3.9.69, V3.5.18.30 +4 CWE-523
Priority LOW 35
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01164 · Published 2022-06-24 · Fixed in V2.3.9.38 CWE-789
Priority LOW 26
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from estab…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01163 · Published 2022-06-24 · Fixed in V2.3.9.38 CWE-400
Priority MEDIUM 45
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01333 · Published 2022-06-24 · Fixed in V2.3.9.38 CWE-187
Priority LOW 36
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01522 · Published 2022-04-07 · Fixed in V3.5.18.0, V4.5.0.0 CWE-334
Priority LOW 33
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01036 · Published 2022-04-07 · Fixed in V3.5.18.0, V4.5.0.0 CWE-822
Priority LOW 31
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01206 · Published 2022-04-07 · Fixed in V3.5.18.0, V4.5.0.0 CWE-476
Priority LOW 35
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01185 · Published 2021-08-04 · No fix listed CWE-476
Priority LOW 35
CODESYS Control Runtime system before 3.5.17.0 has improper input validation.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.01278 · Published 2021-05-03 · No fix listed CWE-20
Priority MEDIUM 42
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.017 · Published 2021-05-03 · No fix listed CWE-476
Priority LOW 33
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02257 · Published 2020-01-24 · No fix listed CWE-770
Priority LOW 37
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 .
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0187 · Published 2019-09-17 · No fix listed CWE-755
Priority LOW 37
An issue was discovered in 3S-Smart CODESYS V3 products.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01932 · Published 2019-08-15 · No fix listed CWE-770
Priority MEDIUM 46
An issue was discovered in 3S-Smart CODESYS V3 products.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02098 · Published 2019-08-15 · No fix listed
Priority LOW 39
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.03353 · Published 2019-02-19 · No fix listed
Priority LOW 38
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02998 · Published 2019-02-19 · No fix listed CWE-330
THREATIST.IORead the docs