Login Request a demo
CR
Product
Control Rte
by Codesys · last CVE Mar 23, 2023
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 7Medium 3Low 0
Severity
All severities14Critical4High7Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Control Rte to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-33485
9.8
1%
Aug 3
CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow
Affected: before 3.5.17.10; before 3.5.17.10
CVE-2020-10245
9.8
2%
Mar 26
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow
Affected: 3.5.8.60 before 3.5.15.40; 3.5.8.60 before 3.5.15.40
CVE-2019-18858
9.8
2%
Nov 20
CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow
Affected: before 3.5.15.20
CVE-2019-13548
9.8
6%
Sep 13
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a…
Affected: 3.5.8.60 before 3.5.12.80; 3.5.13.0 before 3.5.14.10
CVE-2018-25048
8.8
1%
Mar 23
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS…
Affected: 3.0.0.0 before 3.5.12.30
CVE-2019-9008
8.8
2%
Sep 17
An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30
Affected: before 3.5.13.0
CVE-2021-36763
7.5
1%
Aug 3
In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties
Affected: before 3.5.17.10; before 3.5.17.10
CVE-2020-15806
7.5
2%
Jul 22
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation
Affected: 3.5.8.60 before 3.5.16.10; 3.5.8.60 before 3.5.16.10
CVE-2019-9009
7.5
2%
Sep 17
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0
Affected: before 3.5.15.0
CVE-2019-13532
7.5
3%
Sep 13
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted…
Affected: 3.5.8.60 before 3.5.12.80; 3.5.13.0 before 3.5.14.10
CVE-2021-29242
7.3
1%
May 3
CODESYS Control Runtime system before 3.5.17.0 has improper input validation
Affected: 3.0 before 3.5.17.0; 3.0 before 3.5.17.0
CVE-2020-12068
6.5
1%
May 14
An issue was discovered in CODESYS Development System before 3.5.16.0
Affected: 3.0 before 3.5.16.0
CVE-2020-7052
6.5
2%
Jan 24
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition
Affected: 3.5.8.60 before 3.5.15.30; 3.5.8.60 before 3.5.15.30
CVE-2019-13542
6.5
1%
Sep 17
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a…
Affected: 3.5.11.0 before 3.5.15.0
Showing 14