Known vulnerabilities in CODESYS Control Win

Vendor: CODESYS
Software: CODESYS Control Win
Software CPE: cpe:2.3:a:codesys:codesys_control_win:*:*:*:*:*:*:*:*
Website: https://www.codesys.com/
Total vulnerabilities: 18
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CODESYS Control Win CODESYS Control Win is affected by 18 known vulnerabilities: 15 medium, 3 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85960 - Untrusted Pointer Dereference
CVE-2022-47393		 CWE-822 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85959 - Improper input validation
CVE-2022-47392		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85958 - Stack-based buffer overflow
CVE-2022-47385		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85957 - Stack-based buffer overflow
CVE-2022-47390		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85956 - Stack-based buffer overflow
CVE-2022-47389		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85955 - Stack-based buffer overflow
CVE-2022-47388		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85954 - Stack-based buffer overflow
CVE-2022-47387		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85953 - Stack-based buffer overflow
CVE-2022-47386		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85952 - Stack-based buffer overflow
CVE-2022-47384		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85951 - Stack-based buffer overflow
CVE-2022-47383		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85949 - Stack-based buffer overflow
CVE-2022-47382		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85948 - Stack-based buffer overflow
CVE-2022-47381		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85947 - Stack-based buffer overflow
CVE-2022-47380		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85946 - Out-of-bounds write
CVE-2022-47379		 CWE-787 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85945 - Improper input validation
CVE-2022-47378		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU16611 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2018-20026		 CWE-923 Low
No
No
 - 19.12.2018 SB2018121904
#VU16610 - Use of Insufficiently Random Values
CVE-2018-20025		 CWE-330 Low
No
No
 - 18.12.2018 SB2018121904
#VU16612 - Improper Access Control
CVE-2018-10612		 CWE-284 Low
No
No
 - 18.12.2018 SB2018121904
SB2018091401
SB2018103031