Codesys Safety Sil2
20 CVEs affecting Codesys Safety Sil2. Latest disclosed: 2023-08-03. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-4224 | High | 8.8 | 2023-03-23 | In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS re… |
CVE-2019-9009 | High | 7.5 | 2019-09-17 | An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash. |
CVE-2018-20026 | High | 7.5 | 2019-02-19 | Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. |
CVE-2018-20025 | High | 7.5 | 2019-02-19 | Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. |
CVE-2023-37559 | Medium | 6.5 | 2023-08-03 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent… |
CVE-2023-37558 | Medium | 6.5 | 2023-08-03 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent… |
CVE-2023-37557 | Medium | 6.5 | 2023-08-03 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAp… |
CVE-2023-37556 | Medium | 6.5 | 2023-08-03 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37555 | Medium | 6.5 | 2023-08-03 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37554 | Medium | 6.5 | 2023-08-03 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37553 | Medium | 6.5 | 2023-08-03 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37552 | Medium | 6.5 | 2023-08-03 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37551 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the… |
CVE-2023-37550 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37549 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37548 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37547 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37546 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2023-37545 | Medium | 6.5 | 2023-08-03 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent… |
CVE-2020-7052 | Medium | 6.5 | 2020-01-24 | CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. |