Known vulnerabilities in CODESYS HMI (SL)

Vendor: CODESYS
Software: CODESYS HMI (SL)
Software CPE: cpe:2.3:a:codesys:codesys_hmi_sl:*:*:*:*:*:*:*:*
Website: https://www.codesys.com/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting CODESYS HMI (SL) CODESYS HMI (SL) is affected by 17 known vulnerabilities: 17 medium Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107057 - Improper Validation of Integrity Check Value
CVE-2023-28355		 CWE-354 Medium
No
No
 - 07.04.2025 SB2025040731
#VU107056 - Memory corruption
CVE-2022-4046		 CWE-119 Medium
No
No
 - 07.04.2025 SB2025040731
SB2025040732
SB2025040733
#VU107055 - Improper input validation
CVE-2023-37545		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107054 - Improper input validation
CVE-2023-37546		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107053 - Improper input validation
CVE-2023-37547		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107052 - Improper input validation
CVE-2023-37548		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107051 - Improper input validation
CVE-2023-37549		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107050 - Improper input validation
CVE-2023-37550		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107049 - Files or Directories Accessible to External Parties
CVE-2023-37551		 CWE-552 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
#VU107046 - Improper input validation
CVE-2023-37552		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107045 - Improper input validation
CVE-2023-37553		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107044 - Improper input validation
CVE-2023-37554		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107043 - Improper input validation
CVE-2023-37555		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107042 - Improper input validation
CVE-2023-37556		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107041 - Out-of-bounds write
CVE-2023-37557		 CWE-787 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107040 - Improper input validation
CVE-2023-37558		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733
#VU107039 - Improper input validation
CVE-2023-37559		 CWE-20 Medium
No
No
 3.5.19.20 07.04.2025 SB2025040730
SB2025040732
SB2025040733