Codesys vulnerabilities

Products

• Control For Iot2000 Sl 53
• Control For Linux Sl 53
• Control For Pfc200 Sl 53
• Control For Pfc100 Sl 52
• Control For Raspberry Pi Sl 52
• Control Runtime System Toolkit 52
• Control For Beaglebone Sl 51
• Control For Empc-a/imx6 Sl 51
• Control For Iot2000 Sl 51
• Control For Linux Sl 51
• Control For Pfc100 Sl 51
• Control For Pfc200 Sl 51
• Control For Raspberry Pi Sl 51
• Control For Wago Touch Panels 600 Sl 51
• Control For Beaglebone Sl 51
• Control For Plcnext Sl 50
• Control Win (sl) 50
• Control For Empc-a\/imx6 Sl 50
• Control Rte (for Beckhoff Cx) Sl 49
• Control Rte (sl) 49
• Hmi (sl) 48
• Control For Wago Touch Panels 600 Sl 44
• Development System 44
• Control For Plcnext Sl 43
• Control Runtime System Toolkit 41
• Development System V3 40
• Safety Sil2 Runtime Toolkit 31
• Control Win Sl 31
• Control Rte Sl 30
• Hmi 30
• Control Rte Sl \(for Beckhoff Cx\) 28
• Runtime Toolkit 25
• Development System V3 20
• Gateway 20
• Safety Sil2 20
• Control Rte \(for Beckhoff Cx\) Sl 19
• Control Rte \(sl\) 18
• Control Win \(sl\) 18
• Hmi \(sl\) 18
• Plcwinnt 17

Show 71 moreShow less

• Safety Sil2 Psp 16
• Embedded Target Visu Toolkit 16
• Remote Target Visu Toolkit 16
• Safety Sil2 Psp 16
• Safety Sil2 Runtime Toolkit 16
• Control For Empc-a\/imx6 15
• Control For Beaglebone 14
• Control Rte 14
• Control Win 14
• Hmi Sl 14
• Runtime Toolkit 14
• Codesys 13
• Control For Iot2000 12
• Control For Pfc100 12
• Control For Pfc200 12
• Control For Raspberry Pi 12
• Runtime Toolkit 11
• Control For Linux Arm Sl 10
• Edge Gateway 9
• Control For Beckhoff Cx9020 Sl 8
• Development System 8
• Edge Gateway For Windows 8
• Embedded Target Visu Toolkit 8
• Remote Target Visu Toolkit 8
• Virtual Control Sl 8
• Control For Plcnext 8
• Edge Gateway For Linux 7
• Gateway 7
• V2 7
• Control For Linux 7
• Control For Beckhoff Cx9020 6
• Simulation Runtime 6
• V2 Web Server 6
• Control For Beaglebone Sl 5
• Control For Empc-a/imx6 Sl 5
• Control For Iot2000 Sl 5
• Control For Linux Sl 5
• Control For Pfc100 Sl 5
• Control For Pfc200 Sl 5
• Control For Plcnext Sl 5
• Control For Raspberry Pi Sl 5
• Control For Wago Touch Panels 600 Sl 5
• Control Runtime Toolkit 5
• Hmi (sl) 5
• Control For Linux Arm Sl 4
• Control For Linux Arm Sl 4
• Control Rte (for Beckhoff Cx) Sl 4
• Control Rte (sl) 4
• Control Win (sl) 4
• Plchandler 4
• Virtual Control Sl 4
• Gateway Server V2 3
• Plchandler 3
• Control For Wago Touch Panels 600 3
• Linux 3
• Opc Server 3
• Runtime System Toolkit 3
• Web Server 3
• Development System V2.3 2
• Gateway For Windows 2
• Opc Da Server Sl 2
• Plcwinnt 2
• Remote Target Visu 2
• Runtime Toolkit 32 Bit Full 2
• Visualization 2
• Control 2
• Control V3 Runtime System Toolkit 2
• Development System 3 2
• Sp Realtime Nt 2
• Virtual Control Sl 2
• Visualization 2

Newest

• codesys gateway, development system 3, edge gateway for linux +5 more +7 more Uncontrolled Memory Allocation in CODESYS Gateway Client CVE-2026-76992 8.7 HighSeptember 30, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +15 more +17 more Improper Synchronization in Monitoring in CODESYS Control Runtime CVE-2026-79625 7.2 HighSeptember 30, 2026
• codesys profinet Out-of-bounds Write in CODESYS PROFINET Controller CVE-2026-35226 7.1 HighJuly 29, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more Out-of-bounds Write in CODESYS Control CVE-2026-8047 8.7 HighMay 26, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more Incorrect Authorization in CODESYS Control CVE-2026-8046 7.2 HighMay 26, 2026
• codesys development system Incorrect Default Permissions in CODESYS Development System CVE-2026-44469 8.5 HighMay 26, 2026
• codesys development system Incorrect Default Permissions in CODESYS Development System CVE-2026-44468 8.5 HighMay 26, 2026
• codesys visualization CODESYS Visualization - Insufficiently Protected Credentials CVE-2026-0393 6.9 MediumMay 21, 2026
• codesys modbus Improper resource management in CODESYS Modbus TCP Server CVE-2026-35227 8.2 HighMay 12, 2026
• codesys ethernetip Improper timeout handling in CODESYS EtherNetIP CVE-2026-35225 8.7 HighApril 23, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 more CODESYS Control Audit Log Format String DoS CVE-2026-3509 7.5 HighMarch 24, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more CODESYS Control Boot Application Replacement Enables Code Execution CVE-2025-41660 8.8 HighMarch 24, 2026
• codesys installer CODESYS Installer TOCTOU Privilege Escalation CVE-2026-2364 7.3 HighMarch 10, 2026
• codesys, codesys development system +1 more CODESYS Development System - Deserialization of Untrusted Data CVE-2025-41700 7.8 HighDecember 1, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS Control - Invalid type usage in visualization CVE-2025-41738 7.5 HighDecember 1, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more CODESYS Control - Linux/QNX SysSocket flaw CVE-2025-41739 5.9 MediumDecember 1, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 more CODESYS Control DoS via Unauthenticated NULL Pointer Dereference CVE-2025-41691 7.5 HighAugust 4, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more CODESYS Control PKI Exposure Enables Remote Certificate Access CVE-2025-41659 8.3 HighAugust 4, 2025
• codesys runtime toolkit, control for beaglebone sl, control for empc-a/imx6 sl +9 more +11 more CODESYS Toolkit Exposes Sensitive Files via Default Permissions CVE-2025-41658 5.5 MediumAugust 4, 2025
• codesys visualization Forced Browsing Vulnerability in CODESYS Visualization CVE-2025-2595 5.3 MediumApril 23, 2025
• codesys gateway for windows, edge gateway +1 more CODESYS (Edge) Gateway for Windows insecure default CVE-2024-41975 5.3 MediumMarch 18, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +12 more +14 more CODESYS Control V3 removable media path traversal CVE-2025-0694 6.6 MediumMarch 18, 2025
• codesys runtime toolkit CODESYS Control V3 - OPC UA Server Authentication bypass CVE-2025-1468 7.5 HighMarch 18, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +16 more +18 more CODESYS: web server vulnerable to DoS CVE-2024-8175 7.5 HighSeptember 25, 2024
• codesys oscat basic library Out-of-bounds read in OSCAT-Library CVE-2024-6876 4.4 MediumSeptember 10, 2024
• codesys control win (sl), development system v3, edge gateway for windows +6 more +8 more CODESYS: Development system prone to DoS through exposure of resource to wrong sphere CVE-2023-5751 7.8 HighJune 4, 2024
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +17 more +19 more CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products CVE-2024-5000 7.5 HighJune 4, 2024
• apple macos, codesys linux, microsoft windows +2 more Amazon AWS Client VPN has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions. This is resolved in 3.11.1 on Windows, 3.9.1 on macOS, a… CVE-2024-30164 6.7 MediumMay 28, 2024
• codesys development system v2.3 CODESYS: Use after free vulnerability through corrupted project files CVE-2023-49676 5.5 MediumMay 6, 2024
• codesys development system v2.3, development system +1 more CODESYS: Out-of-bounds write through corrupted project files CVE-2023-49675 7.8 HighMay 6, 2024
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +10 more +12 more OS Command Injection in multiple CODESYS products CVE-2023-6357 8.8 HighDecember 5, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +16 more +18 more CODESYS: Improper memory restrictions fro CODESYS Control CVE-2022-4046 8.8 HighAugust 3, 2023
• codesys development system CODESYS: Missing Brute-Force protection in CODESYS Development System CVE-2023-3669 3.3 LowAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Validation of Consistency within Input in multiple products CVE-2023-37559 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Validation of Consistency within Input in multiple products CVE-2023-37558 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Heap-based Buffer Overflow in multiple products CVE-2023-37557 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Input Validation in CmpAppBP CVE-2023-37556 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Input Validation in CmpAppBP CVE-2023-37555 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Input Validation in CmpAppBP CVE-2023-37554 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Input Validation in CmpAppBP CVE-2023-37553 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Improper Input Validation in CmpAppBP CVE-2023-37552 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS Files or Directories Accessible to External Parties in CmpApp CVE-2023-37551 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37550 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37549 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37548 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37547 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37546 6.5 MediumAugust 3, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +20 more +22 more CODESYS: Improper Input Validation in CmpApp component CVE-2023-37545 6.5 MediumAugust 3, 2023
• codesys development system CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries CVE-2023-3662 7.3 HighAugust 3, 2023
• codesys development system CODESYS: Missing integrity check in CODESYS Development System CVE-2023-3663 8.8 HighAugust 3, 2023
• Show olderLoading…