[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faS9UMGKgzcVxwDioMgfmM4xVDmRsAQRTfK1udHruJL4":3,"g5a-ex:codesys\u002Fgateway@*":122,"g5a-family:codesys\u002Fgateway":124},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":44,"kevVulnerabilities":100,"seoMetadata":101,"meta":120},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"codesys","gateway",9,18,0,"2022-07-11",[14,17,19,21,23,25,27,29,31],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"3.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.14.0",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.14.20",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.15.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.15.30",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.16.70",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.17.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.17.10",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.8.60","Gateway by Codesys is a technology product with 9 tracked versions and 18 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40,41,42,43],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},[45,53,58,65,72,76,81,86,91,96],{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":52},"CVE-2018-20026","Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.","2019-02-19",7.5,"v3.1","High",0.03042,{"cveId":54,"description":55,"publishedDate":48,"cvssScore":49,"cvssVersion":56,"severity":51,"isKev":16,"epssScore":57},"CVE-2018-20025","Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.","v3.0",0.02556,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":50,"severity":63,"isKev":16,"epssScore":64},"CVE-2019-9010","An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A\u002FiMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.","2019-08-15",9.8,"Critical",0.01903,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":50,"severity":70,"isKev":16,"epssScore":71},"CVE-2020-7052","CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.","2020-01-24",6.5,"Medium",0.01884,{"cveId":73,"description":74,"publishedDate":61,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":75},"CVE-2019-9012","An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions prior to v3.5.14.20 that contain the CmpGateway component are affected, regardless of the CPU type or operating system: CODESYS Control for BeagleBone, CODESYS Control for emPC-A\u002FiMX6, CODESYS Control for IOT2000, CODESYS Control for Linux, CODESYS Control for PFC100, CODESYS Control for PFC200, CODESYS Control for Raspberry Pi, CODESYS Control V3 Runtime System Toolkit, CODESYS Gateway V3, CODESYS V3 Development System.",0.01752,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":80},"CVE-2019-9009","An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.","2019-09-17",0.01696,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":85},"CVE-2021-29241","CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).","2021-05-03",0.0143,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":90},"CVE-2022-22517","An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.","2022-04-07",0.01321,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":62,"cvssVersion":50,"severity":63,"isKev":16,"epssScore":95},"CVE-2022-31802","In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.","2022-06-24",0.01301,{"cveId":97,"description":98,"publishedDate":94,"cvssScore":49,"cvssVersion":50,"severity":51,"isKev":16,"epssScore":99},"CVE-2022-31804","The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.",0.01136,[],{"title":102,"metaDescription":103,"keywords":104,"structuredData":105},"Gateway by Codesys - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gateway by Codesys covering 9 versions with 18 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gateway vulnerabilities, Gateway security, Gateway CVE, Codesys Gateway, Gateway threat intelligence, Codesys security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":106,"@type":107,"name":108,"description":103,"url":109,"manufacturer":110,"applicationCategory":114,"softwareVersion":115,"mainEntity":116},"https:\u002F\u002Fschema.org","SoftwareApplication","Gateway","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcodesys\u002Fgateway",{"@type":111,"name":112,"url":113},"Organization","Codesys","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcodesys","Security Software","9 versions tracked",{"@type":117,"name":118,"description":119,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Gateway Security Vulnerabilities","Security vulnerabilities affecting Gateway by Codesys",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":121,"apiVersion":15},"2026-10-19T02:38:27.427Z",{"rows":123,"total":11,"capped":16,"failed":11},[],[]]