Known vulnerabilities in CODESYS Control Runtime System Toolkit - page 2

Vendor: CODESYS
Software: CODESYS Control Runtime System Toolkit
Software CPE: cpe:2.3:a:codesys:codesys_control_runtime_system_toolkit:*:*:*:*:*:*:*:*
Website: https://www.codesys.com/
Total vulnerabilities: 39
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CODESYS Control Runtime System Toolkit CODESYS Control Runtime System Toolkit is affected by 39 known vulnerabilities: 1 high, 35 medium, 3 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85960 - Untrusted Pointer Dereference
CVE-2022-47393		 CWE-822 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85959 - Improper input validation
CVE-2022-47392		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85958 - Stack-based buffer overflow
CVE-2022-47385		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85957 - Stack-based buffer overflow
CVE-2022-47390		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85956 - Stack-based buffer overflow
CVE-2022-47389		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85955 - Stack-based buffer overflow
CVE-2022-47388		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85954 - Stack-based buffer overflow
CVE-2022-47387		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85953 - Stack-based buffer overflow
CVE-2022-47386		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85952 - Stack-based buffer overflow
CVE-2022-47384		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85951 - Stack-based buffer overflow
CVE-2022-47383		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85949 - Stack-based buffer overflow
CVE-2022-47382		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85945 - Improper input validation
CVE-2022-47378		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU27676 - Insufficient Verification of Data Authenticity
CVE-2020-6081		 CWE-345 High
No
No
 - 11.05.2020 SB2020051132
#VU19623 - Cleartext Transmission of Sensitive Information
CVE-2019-9013		 CWE-319 Medium
No
No
 - 02.08.2019 SB2019080202
#VU19622 - Missing release of memory after effective lifetime
CVE-2019-9012		 CWE-401 Medium
No
No
 - 02.08.2019 SB2019080201
#VU19621 - Insufficient Verification of Data Authenticity
CVE-2019-9010		 CWE-345 Medium
No
No
 - 02.08.2019 SB2019080201
#VU16611 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2018-20026		 CWE-923 Low
No
No
 - 19.12.2018 SB2018121904
#VU16610 - Use of Insufficiently Random Values
CVE-2018-20025		 CWE-330 Low
No
No
 - 18.12.2018 SB2018121904
#VU16612 - Improper Access Control
CVE-2018-10612		 CWE-284 Low
No
No
 - 18.12.2018 SB2018121904
SB2018091401
SB2018103031


Showing elements 21 - 40 out of 39