Login Request a demo
GA
Product
Gateway
by CODESYS · last CVE Sep 30, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 2High 14Medium 3Low 0
Severity
All severities19Critical2High14Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Gateway to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-31802
9.8
1%
Jun 24
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password
Affected: 2.0 before 2.3.9.38
CVE-2019-9010
9.8
2%
Aug 15
An issue was discovered in 3S-Smart CODESYS V3 products
Affected: 3.0 before 3.5.14.20
CVE-2026-76992
7.5
0%
Sep 30
Uncontrolled Memory Allocation in CODESYS Gateway Client
Affected: 3.0.0.0 before 3.5.22.40
CVE-2022-30792
7.5
1%
Jul 11
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections
Affected: before 3.5.18.20
CVE-2022-30791
7.5
1%
Jul 11
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections
Affected: before 3.5.18.20
CVE-2022-31805
7.5
1%
Jun 24
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected
Affected: before 2.3.9.38
CVE-2022-31804
7.5
1%
Jun 24
The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits
Affected: 2.0 before 2.3.9.38
CVE-2022-22517
7.5
1%
Apr 7
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets
Affected: before 3.5.18.0
CVE-2021-36764
7.5
1%
Aug 4
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference
Affected: 3.0 before 3.5.17.10
CVE-2021-29241
7.5
1%
May 3
CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS)
Affected: 3.0 before 3.5.16.70
CVE-2019-9009
7.5
2%
Sep 17
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0
Affected: before 3.5.15.0
CVE-2019-9012
7.5
2%
Aug 15
An issue was discovered in 3S-Smart CODESYS V3 products
Affected: 3.0 before 3.5.14.20
CVE-2018-20025
7.5
3%
Feb 19
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0
Affected: 3.0 before 3.5.14.0
CVE-2018-20026
7.5
3%
Feb 19
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0
Affected: 3.0 before 3.5.14.0
CVE-2021-29242
7.3
1%
May 3
CODESYS Control Runtime system before 3.5.17.0 has improper input validation
Affected: 3.0 before 3.5.17.0
CVE-2022-22514
7.1
1%
Apr 7
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request
Affected: before 3.5.18.0
CVE-2022-22513
6.5
1%
Apr 7
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash
Affected: before 3.5.18.0
CVE-2020-7052
6.5
2%
Jan 24
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition
Affected: 3.5.15.10 before 3.5.15.30
CVE-2022-31803
5.3
1%
Jun 24
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and…
Affected: 2.0 before 2.3.9.38
Showing 19