[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNcT1yVVw5yfhHgSEXLok_BmVLDEomUrZNAcORYl94RA":3,"g5a-ex:codesys\u002Fcontrol_win@*":120,"g5a-family:codesys\u002Fcontrol_win":122},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":98,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"codesys","control_win",8,14,0,"2023-03-23",[14,17,19,21,23,25,27,29],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"3.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.12.30",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.12.80",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.15.30",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.16.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.17.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.9.80","Control Win by Codesys is a technology product with 8 tracked versions and 14 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39,40],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},[42,50,56,61,66,71,78,84,88,92],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":49},"CVE-2019-13548","CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.","2019-09-13",9.8,"v3.1","Critical",0.0581,{"cveId":51,"description":52,"publishedDate":45,"cvssScore":53,"cvssVersion":47,"severity":54,"isKev":16,"epssScore":55},"CVE-2019-13532","CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.",7.5,"High",0.03152,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":60},"CVE-2020-10245","CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.","2020-03-26",0.025,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":53,"cvssVersion":47,"severity":54,"isKev":16,"epssScore":65},"CVE-2020-15806","CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.","2020-07-22",0.02047,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":16,"epssScore":70},"CVE-2019-18858","CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.","2019-11-20",0.01945,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":47,"severity":76,"isKev":16,"epssScore":77},"CVE-2020-7052","CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.","2020-01-24",6.5,"Medium",0.01884,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":82,"cvssVersion":47,"severity":54,"isKev":16,"epssScore":83},"CVE-2019-9008","An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.","2019-09-17",8.8,0.0186,{"cveId":85,"description":86,"publishedDate":81,"cvssScore":53,"cvssVersion":47,"severity":54,"isKev":16,"epssScore":87},"CVE-2019-9009","An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.",0.01696,{"cveId":89,"description":90,"publishedDate":81,"cvssScore":75,"cvssVersion":47,"severity":76,"isKev":16,"epssScore":91},"CVE-2019-13542","3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.",0.01365,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":47,"severity":54,"isKev":16,"epssScore":97},"CVE-2021-29242","CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.","2021-05-03",7.3,0.01066,[],{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Control Win by Codesys - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Control Win by Codesys covering 8 versions with 14 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Control Win vulnerabilities, Control Win security, Control Win CVE, Codesys Control Win, Control Win threat intelligence, Codesys security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Control Win","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcodesys\u002Fcontrol_win",{"@type":109,"name":110,"url":111},"Organization","Codesys","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcodesys","Security Software","8 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Control Win Security Vulnerabilities","Security vulnerabilities affecting Control Win by Codesys",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":15},"2026-10-19T05:55:58.260Z",{"rows":121,"total":11,"capped":16,"failed":11},[],[123,126,129],{"product":124,"cves":125},"control_win_sl",29,{"product":127,"cves":128},"control_win_\\(sl\\)",17,{"product":130,"cves":131},"control_win_v3",1]