Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Priority LOW 30

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internall…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internall…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lea…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-787
Priority LOW 30

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 29

In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00498 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-552
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20
Priority LOW 30

In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally fr…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00626 Published 2023-08-03 Fixed in V4.10.0.0, V3.5.19.20 CWE-20