Known vulnerabilities in CODESYS Development System

Vendor: CODESYS
Software: CODESYS Development System
Software CPE: cpe:2.3:a:codesys:codesys_development_system:*:*:*:*:*:*:*:*
Website: https://www.codesys.com/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CODESYS Development System CODESYS Development System is affected by 17 known vulnerabilities: 7 high, 5 medium, 5 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU79508 - Incorrect Default Permissions
CVE-2023-3670		 CWE-276 Low
No
No
 3.5.17.0, 4.1.0.0 15.08.2023 SB2021042846
#VU79507 - Untrusted Search Path
CVE-2023-3662		 CWE-426 Low
No
No
 3.5.19.20 15.08.2023 SB2023081519
#VU79506 - Improper Restriction of Excessive Authentication Attempts
CVE-2023-3669		 CWE-307 Medium
No
No
 3.5.19.20 15.08.2023 SB2023081519
#VU79505 - Missing Support for Integrity Check
CVE-2023-3663		 CWE-353 Medium
No
No
 3.5.19.20 15.08.2023 SB2023081519
#VU55324 - Deserialization of Untrusted Data
CVE-2021-21863		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55323 - Deserialization of Untrusted Data
CVE-2021-21865		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55322 - Deserialization of Untrusted Data
CVE-2021-21866		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55321 - Deserialization of Untrusted Data
CVE-2021-21867		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55320 - Deserialization of Untrusted Data
CVE-2021-21864		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55319 - Deserialization of Untrusted Data
CVE-2021-21869		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55318 - Deserialization of Untrusted Data
CVE-2021-21868		 CWE-502 High
No
No
 3.5.17.10 27.07.2021 SB2021072702
#VU55243 - NULL Pointer Dereference
CVE-2021-29241		 CWE-476 Medium
No
No
 3.5.17.0 22.07.2021 SB2021050324
#VU55242 - Security Features
CVE-2021-29240		 CWE-254 Low
No
No
 3.5.17.0 22.07.2021 SB2021042846
#VU19622 - Missing release of memory after effective lifetime
CVE-2019-9012		 CWE-401 Medium
No
No
 - 02.08.2019 SB2019080201
#VU19621 - Insufficient Verification of Data Authenticity
CVE-2019-9010		 CWE-345 Medium
No
No
 - 02.08.2019 SB2019080201
#VU16611 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2018-20026		 CWE-923 Low
No
No
 - 19.12.2018 SB2018121904
#VU16610 - Use of Insufficiently Random Values
CVE-2018-20025		 CWE-330 Low
No
No
 - 18.12.2018 SB2018121904