CODESYS PLCWinNT
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-32143 | V2 – < V2.4.7.57 | CODESYS runtime system prone to directory acces | HIGH 8.8 | 1.2 % | ||
| CVE-2022-32142 | V2 – < V2.4.7.57 | CODESYS runtime system prone to denial of service due to use of out of range pointer | HIGH 8.1 | 1.1 % | ||
| CVE-2022-32141 | V2 – < V2.4.7.57 | CODESYS runtime system prone to denial of service due to buffer over read | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-32140 | V2 – < V2.4.7.57 | CODESYS runtime system prone to denial of service due to buffer copy | MEDIUM 6.5 | 1.1 % | ||
| CVE-2022-32139 | V2 – < V2.4.7.57 | CODESYS runtime system prone to denial of service due to out of bounds read | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-32138 | V2 – < V2.4.7.57 | CODESYS runtime system prone to denial of service due to Unexpected Sign Extension | HIGH 8.8 | 1.2 % | ||
| CVE-2022-32137 | V2 – < V2.4.7.57 | CODESYS Runtime System prone to heap based buffer overflow | HIGH 8.8 | 1.4 % | ||
| CVE-2022-32136 | V2 – < V2.4.7.57 | Codesys runtime systems: Access of uninitialised pointer lead to denial of service. | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-1965 | V2 – < V2.4.7.57 | CODESYS runtime system prone to file deletion due to improper error handling | HIGH 8.1 | 1.1 % |