Login Request a demo
CO
Vendor
CODESYS
97 products with CVEs on record
1,173
CVEs
0
On KEV
26
New 30D
Products
HS
HMI (SL)
CODESYS
9.8
32 CVEs0 on KEV2 new
RT
Runtime Toolkit
CODESYS
9.8
25 CVEs0 on KEV2 new
CF
Control for IOT2000 SL
CODESYS
9.8
53 CVEs0 on KEV1 new
CF
Control for Linux SL
CODESYS
9.8
53 CVEs0 on KEV1 new
CF
Control for PFC100 SL
CODESYS
9.8
53 CVEs0 on KEV1 new
CF
Control for PFC200 SL
CODESYS
9.8
53 CVEs0 on KEV1 new
CF
Control for Raspberry Pi SL
CODESYS
9.8
52 CVEs0 on KEV1 new
CF
Control for BeagleBone SL
CODESYS
9.8
51 CVEs0 on KEV1 new
CF
Control for emPC-A/iMX6 SL
CODESYS
9.8
50 CVEs0 on KEV1 new
CR
Control RTE (SL)
CODESYS
9.8
48 CVEs0 on KEV1 new
CW
Control Win (SL)
CODESYS
9.8
48 CVEs0 on KEV1 new
GA
Gateway
CODESYS
9.8
19 CVEs0 on KEV1 new
DS
Development System 3
CODESYS
8.1
2 CVEs0 on KEV2 new
CF
Control for WAGO Touch Panels 600 SL
CODESYS
8.8
44 CVEs0 on KEV1 new
CF
Control for PLCnext SL
CODESYS
8.8
43 CVEs0 on KEV1 new
SS
Safety SIL2
CODESYS
8.8
21 CVEs0 on KEV1 new
CR
Control RTE (for Beckhoff CX) SL
CODESYS
8.8
18 CVEs0 on KEV1 new
CF
Control for Linux ARM SL
CODESYS
8.8
4 CVEs0 on KEV1 new
PL
PLCHandler
CODESYS
7.5
4 CVEs0 on KEV1 new
VC
Virtual Control SL
CODESYS
8.1
2 CVEs0 on KEV1 new
EG
Edge Gateway for Linux
CODESYS
7.5
1 CVEs0 on KEV1 new
EG
Edge Gateway for Windows
CODESYS
7.5
1 CVEs0 on KEV1 new
OD
OPC DA Server SL
CODESYS
7.5
1 CVEs0 on KEV1 new
CR
Control Runtime System Toolkit
Codesys
9.8
52 CVEs0 on KEV0 new
DS
Development System
Codesys
9.8
43 CVEs0 on KEV0 new
HM
Hmi
Codesys
9.8
30 CVEs0 on KEV0 new
CR
Control Rte SL (for Beckhoff Cx)
Codesys
8.8
28 CVEs0 on KEV0 new
DS
Development System V3
Codesys
9.8
19 CVEs0 on KEV0 new
PL
Plcwinnt
Codesys
9.8
17 CVEs0 on KEV0 new
ET
Embedded Target Visu Toolkit
Codesys
9.8
16 CVEs0 on KEV0 new
RT
Remote Target Visu Toolkit
Codesys
9.8
16 CVEs0 on KEV0 new
SS
Safety Sil2 Psp
Codesys
8.8
16 CVEs0 on KEV0 new
SS
Safety Sil2 Runtime Toolkit
Codesys
8.8
16 CVEs0 on KEV0 new
CF
Control For Empc-a/imx6
Codesys
9.8
15 CVEs0 on KEV0 new
CF
Control For Beaglebone
Codesys
9.8
14 CVEs0 on KEV0 new
CR
Control Rte
Codesys
9.8
14 CVEs0 on KEV0 new
CW
Control Win
Codesys
9.8
14 CVEs0 on KEV0 new
CO
Codesys
Codesys
9.8
13 CVEs0 on KEV0 new
CF
Control For Iot2000
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Pfc100
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Pfc200
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Raspberry PI
Codesys
9.8
12 CVEs0 on KEV0 new
CF
Control For Plcnext
Codesys
9.8
8 CVEs0 on KEV0 new
EG
Edge Gateway
Codesys
7.5
8 CVEs0 on KEV0 new
CF
Control For Linux
Codesys
9.8
7 CVEs0 on KEV0 new
CF
Control For Beckhoff Cx9020
Codesys
8.1
6 CVEs0 on KEV0 new
SR
Simulation Runtime
Codesys
8.8
6 CVEs0 on KEV0 new
VW
V2 Web Server
Codesys
9.8
6 CVEs0 on KEV0 new
CR
Control Runtime Toolkit
Codesys
9.8
5 CVEs0 on KEV0 new
CF
Control For Wago Touch Panels 600
Codesys
7.5
3 CVEs0 on KEV0 new
OS
Opc Server
Codesys
7.5
3 CVEs0 on KEV0 new
RS
Runtime System Toolkit
Codesys
8.8
3 CVEs0 on KEV0 new
WS
Web Server
Codesys
9.8
3 CVEs0 on KEV0 new
CC
CODESYS Control for BeagleBone SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for emPC-A/iMX6 SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for IOT2000 SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for Linux ARM SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for Linux SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for PFC100 SL
CODESYS
8.1
2 CVEs0 on KEV0 new
CC
CODESYS Control for PFC200 SL
CODESYS
8.1
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-76992
DS
Development System 3
CODESYS
7.5
0%
Sep 30Uncontrolled Memory Allocation in CODESYS Gateway Client
CVE-2026-79625
CR
Control RTE (for Beckhoff CX) SL
CODESYS
8.1
0%
Sep 30Improper Synchronization in Monitoring in CODESYS Control Runtime
CVE-2026-35226
CP
CODESYS PROFINET
CODESYS
6.5
0%
Jul 29Out-of-bounds Write in CODESYS PROFINET Controller
CVE-2026-8047
CC
CODESYS Control for WAGO Touch Panels 600 SL
CODESYS
7.5
0%
May 26Out-of-bounds Write in CODESYS Control
CVE-2026-8046
CV
CODESYS Virtual Control SL
CODESYS
8.1
0%
May 26Incorrect Authorization in CODESYS Control
CVE-2026-44469
CD
CODESYS Development System
CODESYS
7.0
0%
May 26Incorrect Default Permissions in CODESYS Development System
CVE-2026-44468
CD
CODESYS Development System
CODESYS
7.8
0%
May 26Incorrect Default Permissions in CODESYS Development System
CVE-2026-0393
VI
Visualization
CODESYS
6.5
0%
May 21CODESYS Visualization - Insufficiently Protected Credentials
CVE-2026-35227
CM
CODESYS Modbus
CODESYS
8.2
0%
May 12Improper resource management in CODESYS Modbus TCP Server
CVE-2026-35225
CE
CODESYS EtherNetIP
CODESYS
8.7
0%
Apr 23Improper timeout handling in CODESYS EtherNetIP
CVE-2025-41738
CF
Control For Empc-a/imx6 SL
Codesys
7.5
0%
Dec 1An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading…
CVE-2025-41700
CO
Codesys
Codesys
7.8
0%
Dec 1An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system
CVE-2024-6876
OB
OSCAT Basic Library
CODESYS
4.4
0%
Sep 10Out-of-bounds read in OSCAT-Library
CVE-2023-6357
CF
Control For Linux SL
Codesys
8.8
1%
Dec 5A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the…
CVE-2022-4046
CF
Control For Beaglebone SL
Codesys
8.8
1%
Aug 3In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access…
CVE-2023-3669
DS
Development System
Codesys
3.3
0%
Aug 3A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import…
CVE-2023-37559
CF
Control For Empc-a/imx6 SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37558
CF
Control For Pfc100 SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37557
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to…
CVE-2023-37556
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37555
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37554
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37553
SS
Safety Sil2
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37552
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37551
CF
Control For Wago Touch Panels 600 SL
Codesys
6.5
0%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to…
CVE-2023-37550
CF
Control For Empc-a/imx6 SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37549
HM
Hmi
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37548
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37547
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-37546
CF
Control For Beaglebone SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-3663
DS
Development System
Codesys
8.8
1%
Aug 3In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of…
CVE-2023-3662
DS
Development System
Codesys
7.3
0%
Aug 3In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users…
CVE-2023-37545
CF
Control For Linux SL
Codesys
6.5
1%
Aug 3In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause…
CVE-2023-3670
DS
Development System
Codesys
7.3
0%
Jul 28In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the…
CVE-2022-47393
SS
Safety Sil2 Psp
Codesys
6.5
1%
May 15An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products…
CVE-2022-47392
CF
Control For Empc-a/imx6 SL
Codesys
6.5
1%
May 15An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions…
CVE-2022-4048
DS
Development System V3
Codesys
7.7
0%
May 15Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the…
CVE-2022-47391
CF
Control For Empc-a/imx6 SL
Codesys
7.5
2%
May 15In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a…
CVE-2022-47390
SS
Safety Sil2 Runtime Toolkit
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47389
CF
Control For Beaglebone SL
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47388
CF
Control For Empc-a/imx6 SL
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47387
CF
Control For Beaglebone SL
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47386
CF
Control For Linux SL
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47385
CF
Control For Beaglebone SL
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47384
CF
Control For Empc-a/imx6 SL
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47383
SS
Safety Sil2 Psp
Codesys
8.8
1%
May 15An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47382
SS
Safety Sil2 Runtime Toolkit
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…
CVE-2022-47381
SS
Safety Sil2 Psp
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can…
CVE-2022-47380
CF
Control For Iot2000 SL
Codesys
8.8
1%
May 15An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can…
CVE-2022-47379
CF
Control For Raspberry PI SL
Codesys
8.8
2%
May 15An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a…
CVE-2022-47378
CF
Control For Beaglebone SL
Codesys
6.5
1%
May 15Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability
CVE-2022-22508
CF
Control For Empc-a/imx6 SL
Codesys
4.3
1%
May 15Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type
CVE-2022-4224
CF
Control For Beaglebone SL
Codesys
8.8
1%
Mar 23In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the…
CVE-2018-25048
ET
Embedded Target Visu Toolkit
Codesys
8.8
1%
Mar 23The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS…
CVE-2020-12069
HV
Hmi V3
Codesys
7.8
0%
Dec 26In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing…
CVE-2022-1989
VI
Visualization
Codesys
5.3
1%
Aug 23All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users
CVE-2022-30792
HM
Hmi
Codesys
7.5
1%
Jul 11In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections
CVE-2022-30791
EG
Edge Gateway
Codesys
7.5
1%
Jul 11In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections
CVE-2022-1794
OD
Opc DA Server
Codesys
5.5
0%
Jul 11The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the…
CVE-2022-32143
PL
Plcwinnt
Codesys
8.8
1%
Jun 24In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g