Skip to content
OpenAdvisories

Vendor

CODESYS

104 known vulnerabilities.

Products

CODESYS Control for BeagleBone SL 50 CODESYS Control for emPC-A/iMX6 SL 50 CODESYS Control for IOT2000 SL 50 CODESYS Control for Linux SL 50 CODESYS Control for PFC100 SL 50 CODESYS Control for PFC200 SL 50 CODESYS Control for Raspberry Pi SL 50 CODESYS Control for WAGO Touch Panels 600 SL 50 CODESYS Control Win (SL) 49 CODESYS Control for PLCnext SL 49 CODESYS Control RTE (SL) 48 CODESYS Control RTE (for Beckhoff CX) SL 48 CODESYS HMI (SL) 47 CODESYS Control Runtime System Toolkit 40 CODESYS Development System V3 40 CODESYS Safety SIL2 Runtime Toolkit 31 CODESYS Safety SIL2 PSP 16 Runtime Toolkit 14 CODESYS Runtime Toolkit 10 CODESYS Control for Linux ARM SL 10 PLCWinNT 9 CODESYS Control for Beckhoff CX9020 SL 8 CODESYS Development System 8 CODESYS Embedded Target Visu Toolkit 8 CODESYS Remote Target Visu Toolkit 8 CODESYS Virtual Control SL 8 CODESYS Edge Gateway for Windows 8 CODESYS V2 7 CODESYS Gateway 7 CODESYS Edge Gateway for Linux 7 Control for BeagleBone SL 5 Control for emPC-A/iMX6 SL 5 Control for IOT2000 SL 5 Control for Linux SL 5 Control for PFC100 SL 5 Control for PFC200 SL 5 Control for PLCnext SL 5 Control for Raspberry Pi SL 5 Control for WAGO Touch Panels 600 SL 5 HMI (SL) 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-31806

    Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT

    In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.

    CODESYS CODESYS Runtime Toolkit 32 bit full CODESYS PLCWinNT ICS / OT
  • Critical 9.8
    CVE-2022-31802

    Partial string comparison in CODESYS gateway server

    In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding …

    CODESYS CODESYS Gateway Server V2 ICS / OT
  • Critical 9.1
    CVE-2021-34584

    CODESYS V2 web server: crafted requests could trigger a buffer over-read (DoS)

    Crafted web server requests can be utilised to read partial stack or heap memory or may trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.

    CODESYS CODESYS V2 ICS / OT