Codesys Embedded Target Visu Toolkit vulnerabilities

• codesys control for beaglebone, control for empc-a/imx6, control for iot2000 +22 more +24 more Codesys Runtime Improper Limitation of a Pathname CVE-2018-25048 8.8 HighMarch 23, 2023
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels CVE-2022-30792 7.5 HighJuly 11, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections CVE-2022-30791 7.5 HighJuly 11, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +21 more +23 more Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system. CVE-2022-22519 7.5 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more Communication Components in multiple CODESYS products vulnerable to communication channel disruption CVE-2022-22517 7.5 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +22 more +24 more A component of the CODESYS Control runtime system allows read and write access to configuration files CVE-2022-22515 8.1 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 more Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. CVE-2022-22514 7.1 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 more Null Pointer Dereference in multiple CODESYS products can lead to a DoS. CVE-2022-22513 6.5 MediumApril 7, 2022
• codesys control, control rte, control runtime system toolkit +4 more +6 more In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. CVE-2021-36763 7.5 HighAugust 3, 2021
• codesys control, control rte, control runtime system toolkit +4 more +6 more CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CVE-2021-33485 9.8 CriticalAugust 3, 2021
• codesys control for beaglebone sl, control for empc-a\/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send... CVE-2021-29242 7.3 HighMay 3, 2021
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +13 more +15 more CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. CVE-2020-15806 7.5 HighJuly 22, 2020
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 more CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer... CVE-2020-10245 9.8 CriticalMarch 26, 2020
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 more CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a... CVE-2019-18858 9.8 CriticalNovember 20, 2019
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +10 more +12 more CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially... CVE-2019-13548 9.8 CriticalSeptember 13, 2019
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +10 more +12 more CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially... CVE-2019-13532 7.5 HighSeptember 13, 2019