RT
Product
Runtime Toolkit
by CODESYS · last CVE Sep 30, 2026
25
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 1High 17Medium 7Low 0
Watch

Add Runtime Toolkit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-32141
6.5
1%
Jun 24
Multiple CODESYS Products are prone to a buffer over read
Affected: 2.0 before 2.4.7.57
CVE-2022-32140
6.5
1%
Jun 24
Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the…
Affected: 2.0 before 2.4.7.57
CVE-2022-32139
6.5
1%
Jun 24
In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition
Affected: 2.0 before 2.4.7.57
CVE-2022-32136
6.5
1%
Jun 24
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service
Affected: 2.0 before 2.4.7.57
CVE-2021-34596
6.5
1%
Oct 26
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a…
Affected: before 2.4.7.56
CVE-2019-19789
6.5
1%
Dec 20
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference
Affected: before 2.4.7.54
CVE-2021-30187
5.3
0%
May 25
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command
Affected: before 2.4.7.55
Showing 7