Plcwinnt vulnerabilitiesRanked by how likely they are to be used.
Plcwinnt is made by Codesys. We track 17 published vulnerabilities in it, across 4 versions. None of them is on the list of flaws known to be exploited today. If you run Plcwinnt, keep it on a version the vendor still supports.
We keep watching the known-exploited list.
Which Plcwinnt vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Plcwinnt's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Plcwinnt flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 7.4%CVE-2021-30186High
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
- 7.2%CVE-2021-30195High
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
- 2.7%CVE-2021-34593High
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions.
- 1.4%CVE-2022-32137High
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite.
- 1.2%CVE-2019-19789Medium
3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
- 1.2%CVE-2022-31806Critical
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no...
- 1.2%CVE-2022-32143High
In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g.
- 1.2%CVE-2022-32138High
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.
- 1.1%CVE-2022-32142High
Multiple CODESYS Products are prone to a out-of bounds read or write access.
- 1.1%CVE-2022-1965High
Multiple products of CODESYS implement a improper error handling.
Running Plcwinnt? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
- Matched to
- Plcwinnt on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 17 published vulnerabilities listed under the name Plcwinnt, across 4 versions.
None of Plcwinnt's vulnerabilities is on the list of flaws known to be exploited today.
Create a Precursor Intelligence account and track Plcwinnt. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.