RT
Product
Runtime Toolkit
25
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 17Medium 7Low 0
Watch
Add Runtime Toolkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6357 | 8.8 | Dec 5 | A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the… Affected: before 3.5.19.50 |
| CVE-2022-4224 | 8.8 | Mar 23 | In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the… Affected: 3.0 before 3.5.19.0 |
| CVE-2022-32143 | 8.8 | Jun 24 | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g Affected: 2.0 before 2.4.7.57 |
| CVE-2022-32138 | 8.8 | Jun 24 | In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite Affected: 2.0 before 2.4.7.57 |
| CVE-2022-32137 | 8.8 | Jun 24 | In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or… Affected: 2.0 before 2.4.7.57 |
| CVE-2019-9013 | 8.8 | Aug 15 | An issue was discovered in 3S-Smart CODESYS V3 products Affected: 3.0 before 3.5.16.0 |
| CVE-2026-79625 | 8.1 | Sep 30 | Improper Synchronization in Monitoring in CODESYS Control Runtime Affected: 3.0.0.0 before 3.5.22.40 |
| CVE-2022-32142 | 8.1 | Jun 24 | Multiple CODESYS Products are prone to a out-of bounds read or write access Affected: 2.0 before 2.4.7.57 |
| CVE-2022-1965 | 8.1 | Jun 24 | Multiple products of CODESYS implement a improper error handling Affected: 2.0 before 2.4.7.57 |
| CVE-2021-34595 | 8.1 | Oct 26 | A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56,… Affected: before 2.4.7.56 |
| CVE-2026-76992 | 7.5 | Sep 30 | Uncontrolled Memory Allocation in CODESYS Gateway Client Affected: 3.0.0.0 before 3.5.22.40 |
| CVE-2025-41738 | 7.5 | Dec 1 | An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading… Affected: 3.5.18.0 before 3.5.21.40 |
| CVE-2022-31805 | 7.5 | Jun 24 | In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected Affected: before 2.4.7.57 |
| CVE-2021-34593 | 7.5 | Oct 26 | In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions Affected: before 2.4.7.56 |
| CVE-2021-33486 | 7.5 | Aug 3 | All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions Affected: 3.5.8.0 before 3.5.17.10 |
| CVE-2021-30195 | 7.5 | May 25 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation Affected: before 2.4.7.55 |
| CVE-2021-30186 | 7.5 | May 25 | CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow Affected: before 2.4.7.55 |
Showing 17