IDCVSSSummaryLast (major) updatePublished
CVE-2019-13532 5.0
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
09-10-2019 - 23:46 13-09-2019 - 17:15
CVE-2019-13548 7.5
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
09-10-2019 - 23:46 13-09-2019 - 17:15
CVE-2019-18858 7.5
CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
20-11-2019 - 18:31 20-11-2019 - 18:15
CVE-2020-7052 4.0
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
24-01-2020 - 20:46 24-01-2020 - 20:15
CVE-2019-9008 6.5
An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.
17-09-2019 - 18:58 17-09-2019 - 14:15
CVE-2019-9009 5.0
An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
18-09-2019 - 19:15 17-09-2019 - 16:15
CVE-2020-10245 10.0
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
26-03-2020 - 04:15 26-03-2020 - 04:15
CVE-2020-12068 6.4
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
14-05-2020 - 21:15 14-05-2020 - 21:15
CVE-2018-10612 10.0
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attacker access to the device and sensitive information, in
09-10-2019 - 23:32 29-01-2019 - 16:29
CVE-2018-20025 5.0
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
02-04-2019 - 15:29 19-02-2019 - 21:29
CVE-2018-20026 5.0
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
02-04-2019 - 15:29 19-02-2019 - 21:29
CVE-2019-9013 5.8
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all
30-08-2019 - 11:42 15-08-2019 - 17:15
Back to Top Mark selected
Back to Top