Codesys vulnerabilitiesNone on the known-exploited list.
Codesys has 127 published vulnerabilities across 81 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Control Runtime System Toolkit, with 52. If you run Codesys software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Codesys products have the most vulnerabilities?
Control Runtime System Toolkit leads with 52 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Codesys vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Codesys's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Codesys flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 14%CVE-2021-34586High
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
- 8.4%CVE-2021-34583High
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
- 7.4%CVE-2021-30186High
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
- 7.2%CVE-2021-30195High
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
- 5.8%CVE-2019-13548Critical
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote...
- 3.2%CVE-2019-13532High
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
- 3.0%CVE-2018-20026High
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
- 2.7%CVE-2021-34593High
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions.
- 2.6%CVE-2017-6027Critical
An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server.
- 2.6%CVE-2018-20025High
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
All Codesys products we track.
58 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Control Runtime System Toolkitcontrol_runtime_system_toolkit52 vulnerabilities10 versions
- Control for Iot2000 Slcontrol_for_iot2000_sl51 vulnerabilities32 versions
- Control for Linux Slcontrol_for_linux_sl51 vulnerabilities14 versions
- Control for Pfc100 Slcontrol_for_pfc100_sl51 vulnerabilities24 versions
- Control for Pfc200 Slcontrol_for_pfc200_sl51 vulnerabilities25 versions
- Control for Raspberry Pi Slcontrol_for_raspberry_pi_sl50 vulnerabilities24 versions
- Control for Beaglebone Slcontrol_for_beaglebone_sl49 vulnerabilities35 versions
- Control for Empc-A/imx6 Slcontrol_for_empc-a\/imx6_sl48 vulnerabilities31 versions
- Control for Wago Touch Panels 600 Slcontrol_for_wago_touch_panels_600_sl42 vulnerabilities7 versions
- Development Systemdevelopment_system42 vulnerabilities69 versions
- Control for Plcnext Slcontrol_for_plcnext_sl41 vulnerabilities5 versions
- HMIhmi30 vulnerabilities43 versions
- Control Rte Slcontrol_rte_sl29 vulnerabilities38 versions
- Control Win Slcontrol_win_sl29 vulnerabilities49 versions
- Control Rte Sl (for Beckhoff Cx)control_rte_sl_\(for_beckhoff_cx\)27 vulnerabilities36 versions
- Runtime Toolkitruntime_toolkit22 vulnerabilities9 versions
- Safety Sil2safety_sil220 vulnerabilities6 versions
- Gatewaygateway18 vulnerabilities9 versions
- Plcwinntplcwinnt17 vulnerabilities4 versions
- Embedded Target Visu Toolkitembedded_target_visu_toolkit16 vulnerabilities7 versions
- Remote Target Visu Toolkitremote_target_visu_toolkit16 vulnerabilities7 versions
- Control for Empc-A/imx6control_for_empc-a\/imx615 vulnerabilities24 versions
- Control for Beaglebonecontrol_for_beaglebone14 vulnerabilities24 versions
- Control Rtecontrol_rte14 vulnerabilities49 versions
This directory lists the 58 Codesys products with at least one tracked version, of 81 in our catalogue.
Running Codesys? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
- Matched to
- Codesys on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 127 published vulnerabilities across 81 products and 875 versions from Codesys.
None of Codesys's vulnerabilities is on the list of flaws known to be exploited today.
Control Runtime System Toolkit, with 52 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Codesys products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.