Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: CODESYS Development System 3.5.19.20 Clear all filters
TI-2023-03426 CVE-2023-3669 · GHSA-gwpm-jp9f-hxfg

CODESYS: Missing Brute-Force protection in CODESYS Development System

Priority LOW 15

A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00149 Published 2023-08-03 Fixed in 3.5.19.20 CWE-307
TI-2023-03420 CVE-2023-3663 · GHSA-c86m-wfx2-qmx9

CODESYS: Missing integrity check in CODESYS Development System

Priority MEDIUM 42

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODE…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01021 Published 2023-08-03 Fixed in 3.5.19.20 CWE-940