Codesys Gateway vulnerabilities

• codesys gateway, development system 3, edge gateway for linux +5 more +7 more Uncontrolled Memory Allocation in CODESYS Gateway Client CVE-2026-76992 8.7 HighSeptember 30, 2026
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +13 more +15 more CODESYS Control - Linux/QNX SysSocket flaw CVE-2025-41739 5.9 MediumDecember 1, 2025
• codesys gateway for windows, edge gateway +1 more CODESYS (Edge) Gateway for Windows insecure default CVE-2024-41975 5.3 MediumMarch 18, 2025
• codesys control win (sl), development system v3, edge gateway for windows +6 more +8 more CODESYS: Development system prone to DoS through exposure of resource to wrong sphere CVE-2023-5751 7.8 HighJune 4, 2024
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +22 more +24 more CODESYS: Multiple products prone to Improper Input Validation CVE-2022-47391 7.5 HighMay 15, 2023
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels CVE-2022-30792 7.5 HighJuly 11, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections CVE-2022-30791 7.5 HighJuly 11, 2022
• codesys development system, edge gateway for windows, gateway +13 more +15 more Insecure transmission of credentials CVE-2022-31805 7.5 HighJune 24, 2022
• codesys gateway server v2, gateway +1 more CODESYS Gateway server prone to denial of service attack due to excessive memory allocation CVE-2022-31804 7.5 HighJune 24, 2022
• codesys gateway server v2, gateway +1 more CODESYS Gateway Server V2 prone to Denial of Service Attack CVE-2022-31803 5.3 MediumJune 24, 2022
• codesys gateway server v2, gateway +1 more Partial string comparison in CODESYS gateway server CVE-2022-31802 9.8 CriticalJune 24, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +28 more +30 more Communication Components in multiple CODESYS products vulnerable to communication channel disruption CVE-2022-22517 7.5 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 more Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. CVE-2022-22514 7.1 HighApril 7, 2022
• codesys control for beaglebone sl, control for beckhoff cx9020 sl, control for empc-a/imx6 sl +26 more +28 more Null Pointer Dereference in multiple CODESYS products can lead to a DoS. CVE-2022-22513 6.5 MediumApril 7, 2022
• codesys gateway In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted... CVE-2021-36764 7.5 HighAugust 4, 2021
• codesys control for beaglebone sl, control for empc-a\/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send... CVE-2021-29242 7.3 HighMay 3, 2021
• codesys gateway, control for beaglebone sl, control for empc-a\/imx6 sl +8 more +10 more CODESYS Gateway 3 before 3.5.17.0 has a NULL pointer dereference that may result in a denial of... CVE-2021-29241 7.5 HighMay 3, 2021
• codesys gateway, hmi, control for beaglebone +12 more +14 more CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation... CVE-2020-7052 6.5 MediumJanuary 24, 2020
• codesys control for beaglebone, control for empc-a\/imx6, control for iot2000 +11 more +13 more An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the... CVE-2019-9009 7.5 HighSeptember 17, 2019
• codesys development system, gateway, control for beaglebone sl +7 more +9 more An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may... CVE-2019-9012 7.5 HighAugust 15, 2019
• codesys development system, gateway, control for beaglebone sl +7 more +9 more An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly... CVE-2019-9010 9.8 CriticalAugust 15, 2019
• kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +16 more +18 more Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. CVE-2018-20026 7.5 HighFebruary 19, 2019
• kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +13 more +15 more Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. CVE-2018-20025 7.5 HighFebruary 19, 2019
• 3s-smart codesys gateway server, codesys 3s-smart codesys gateway server +1 more Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.47 allow... CVE-2015-6460 7.5 HighSeptember 18, 2015