Known vulnerabilities in CODESYS HMI

Vendor: CODESYS
Software: CODESYS HMI
Software CPE: cpe:2.3:a:codesys:codesys_hmi:*:*:*:*:*:*:*:*
Website: https://www.codesys.com/
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CODESYS HMI CODESYS HMI is affected by 19 known vulnerabilities: 16 medium, 3 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85960 - Untrusted Pointer Dereference
CVE-2022-47393		 CWE-822 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85959 - Improper input validation
CVE-2022-47392		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85958 - Stack-based buffer overflow
CVE-2022-47385		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85957 - Stack-based buffer overflow
CVE-2022-47390		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85956 - Stack-based buffer overflow
CVE-2022-47389		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85955 - Stack-based buffer overflow
CVE-2022-47388		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85954 - Stack-based buffer overflow
CVE-2022-47387		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85953 - Stack-based buffer overflow
CVE-2022-47386		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85952 - Stack-based buffer overflow
CVE-2022-47384		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85951 - Stack-based buffer overflow
CVE-2022-47383		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85949 - Stack-based buffer overflow
CVE-2022-47382		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85948 - Stack-based buffer overflow
CVE-2022-47381		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85947 - Stack-based buffer overflow
CVE-2022-47380		 CWE-121 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85946 - Out-of-bounds write
CVE-2022-47379		 CWE-787 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU85945 - Improper input validation
CVE-2022-47378		 CWE-20 Medium
No
No
 3.5.19.0 31.01.2024 SB2024013145
SB2024013146
#VU19623 - Cleartext Transmission of Sensitive Information
CVE-2019-9013		 CWE-319 Medium
No
No
 - 02.08.2019 SB2019080202
#VU16611 - Improper Restriction of Communication Channel to Intended Endpoints
CVE-2018-20026		 CWE-923 Low
No
No
 - 19.12.2018 SB2018121904
#VU16610 - Use of Insufficiently Random Values
CVE-2018-20025		 CWE-330 Low
No
No
 - 18.12.2018 SB2018121904
#VU16612 - Improper Access Control
CVE-2018-10612		 CWE-284 Low
No
No
 - 18.12.2018 SB2018121904
SB2018091401
SB2018103031