Codesys Runtime Toolkit vulnerabilities

• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS Control - Invalid type usage in visualization CVE-2025-41738 7.5 HighDecember 1, 2025
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +16 more +18 more CODESYS: web server vulnerable to DoS CVE-2024-8175 7.5 HighSeptember 25, 2024
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +17 more +19 more CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products CVE-2024-5000 7.5 HighJune 4, 2024
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +10 more +12 more OS Command Injection in multiple CODESYS products CVE-2023-6357 8.8 HighDecember 5, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to improperly restricted memory operations CVE-2022-47393 6.5 MediumMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to Improper Input Validation CVE-2022-47392 6.5 MediumMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +22 more +24 more CODESYS: Multiple products prone to Improper Input Validation CVE-2022-47391 7.5 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47390 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47389 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47388 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47387 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47386 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47385 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47384 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47383 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47382 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to stack based out-of-bounds write CVE-2022-47381 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to out-of-bounds write CVE-2022-47380 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to out-of-bounds write CVE-2022-47379 8.8 HighMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +19 more +21 more CODESYS: Multiple products prone to Improper Input Validation CVE-2022-47378 6.5 MediumMay 15, 2023
• codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +21 more +23 more CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 CVE-2022-4224 8.8 HighMarch 23, 2023
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to directory acces CVE-2022-32143 8.8 HighJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to denial of service due to use of out of range pointer CVE-2022-32142 8.1 HighJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to denial of service due to buffer over read CVE-2022-32141 6.5 MediumJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to denial of service due to buffer copy CVE-2022-32140 6.5 MediumJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to denial of service due to out of bounds read CVE-2022-32139 6.5 MediumJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to denial of service due to Unexpected Sign Extension CVE-2022-32138 8.8 HighJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS Runtime System prone to heap based buffer overflow CVE-2022-32137 8.8 HighJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more Codesys runtime systems: Access of uninitialised pointer lead to denial of service. CVE-2022-32136 6.5 MediumJune 24, 2022
• codesys plcwinnt, runtime toolkit 32 bit full, runtime toolkit +2 more Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT CVE-2022-31806 9.8 CriticalJune 24, 2022
• codesys development system, edge gateway for windows, gateway +13 more +15 more Insecure transmission of credentials CVE-2022-31805 7.5 HighJune 24, 2022
• codesys plcwinnt, runtime toolkit +1 more CODESYS runtime system prone to file deletion due to improper error handling CVE-2022-1965 8.1 HighJune 24, 2022
• codesys, codesys v2, plcwinnt +28 more +30 more CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service CVE-2021-34596 6.5 MediumOctober 26, 2021
• codesys, codesys v2, plcwinnt +28 more +30 more CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service CVE-2021-34595 8.1 HighOctober 26, 2021
• codesys v2, plcwinnt, runtime toolkit +13 more +15 more CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service CVE-2021-34593 7.5 HighOctober 26, 2021
• codesys runtime toolkit All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before... CVE-2021-33486 7.5 HighAugust 3, 2021
• codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 more CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. CVE-2021-30195 7.5 HighMay 25, 2021
• codesys plcwinnt, runtime toolkit, wago 750-8202 firmware +26 more +28 more CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow. CVE-2021-30186 7.5 HighMay 25, 2021
• codesys runtime toolkit, wago 750-8202 firmware, 750-8203 firmware +25 more +27 more CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used... CVE-2021-30187 5.3 MediumMay 25, 2021
• codesys plcwinnt, runtime toolkit, sp realtime nt +2 more 3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4... CVE-2019-19789 6.5 MediumDecember 20, 2019
• codesys development system, gateway, control for beaglebone sl +7 more +9 more An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may... CVE-2019-9012 7.5 HighAugust 15, 2019
• codesys development system, gateway, control for beaglebone sl +7 more +9 more An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly... CVE-2019-9010 9.8 CriticalAugust 15, 2019
• codesys development system, raspberry pi, control for beaglebone sl +9 more +11 more An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS... CVE-2019-9013 8.8 HighAugust 15, 2019
• kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +16 more +18 more Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. CVE-2018-20026 7.5 HighFebruary 19, 2019
• kaspersky lab codesys v3 products, codesys control for beaglebone sl, control for empc-a\/imx6 sl +13 more +15 more Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. CVE-2018-20025 7.5 HighFebruary 19, 2019
• 3s-smart software solutions gmbh codesys control v3 products prior to version 3.5.14.0, codesys control for beaglebone sl, control for empc-a\/imx6 sl +10 more +12 more In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user... CVE-2018-10612 9.8 CriticalJanuary 29, 2019