[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fK1YCqg__NFxHTzpRo2TC1woDsYeFIpdNJE07g7pJalo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":324,"kevVulnerabilities":374,"topProductsByCves":375,"seoMetadata":386,"meta":395},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":323},5894,"codesys",81,127,0,875,"2024-09-10","c",[16,22,28,32,36,40,44,49,54,59,63,68,73,77,81,86,91,96,101,106,110,115,118,121,124,128,131,135,138,142,145,149,152,157,161,165,168,172,175,178,182,185,189,192,196,200,204,208,211,214,217,221,224,227,231,235,238,241,244,248,252,256,260,263,266,269,273,276,280,283,286,290,294,297,301,305,308,311,314,317,320],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},28316,"control_runtime_system_toolkit",10,52,"2023-08-03",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},28294,"control_for_iot2000_sl",32,51,"2023-12-05",{"id":29,"product_name":30,"version_count":31,"cve_count":26,"kev_count":11,"last_cve_update":27},28301,"control_for_pfc200_sl",25,{"id":33,"product_name":34,"version_count":35,"cve_count":26,"kev_count":11,"last_cve_update":27},28299,"control_for_pfc100_sl",24,{"id":37,"product_name":38,"version_count":39,"cve_count":26,"kev_count":11,"last_cve_update":27},28297,"control_for_linux_sl",14,{"id":41,"product_name":42,"version_count":35,"cve_count":43,"kev_count":11,"last_cve_update":27},28305,"control_for_raspberry_pi_sl",50,{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":27},28288,"control_for_beaglebone_sl",35,49,{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":11,"last_cve_update":21},28291,"control_for_empc-a\\\u002Fimx6_sl",31,48,{"id":55,"product_name":56,"version_count":57,"cve_count":58,"kev_count":11,"last_cve_update":27},28307,"control_for_wago_touch_panels_600_sl",7,42,{"id":60,"product_name":61,"version_count":62,"cve_count":58,"kev_count":11,"last_cve_update":21},28324,"development_system",69,{"id":64,"product_name":65,"version_count":66,"cve_count":67,"kev_count":11,"last_cve_update":27},28303,"control_for_plcnext_sl",5,41,{"id":69,"product_name":70,"version_count":71,"cve_count":72,"kev_count":11,"last_cve_update":21},28332,"hmi",43,30,{"id":74,"product_name":75,"version_count":48,"cve_count":76,"kev_count":11,"last_cve_update":21},28322,"control_win_sl",29,{"id":78,"product_name":79,"version_count":80,"cve_count":76,"kev_count":11,"last_cve_update":21},28313,"control_rte_sl",38,{"id":82,"product_name":83,"version_count":84,"cve_count":85,"kev_count":11,"last_cve_update":21},28314,"control_rte_sl_\\(for_beckhoff_cx\\)",36,27,{"id":87,"product_name":88,"version_count":89,"cve_count":90,"kev_count":11,"last_cve_update":27},28350,"runtime_toolkit",9,22,{"id":92,"product_name":93,"version_count":94,"cve_count":95,"kev_count":11,"last_cve_update":21},28352,"safety_sil2",6,20,{"id":97,"product_name":98,"version_count":11,"cve_count":99,"kev_count":11,"last_cve_update":100},28325,"development_system_v3",19,"2023-05-15",{"id":102,"product_name":103,"version_count":89,"cve_count":104,"kev_count":11,"last_cve_update":105},28330,"gateway",18,"2022-07-11",{"id":107,"product_name":108,"version_count":11,"cve_count":109,"kev_count":11,"last_cve_update":100},28333,"hmi_\\(sl\\)",17,{"id":111,"product_name":112,"version_count":113,"cve_count":109,"kev_count":11,"last_cve_update":114},28342,"plcwinnt",4,"2022-06-24",{"id":116,"product_name":117,"version_count":11,"cve_count":109,"kev_count":11,"last_cve_update":100},28320,"control_win_\\(sl\\)",{"id":119,"product_name":120,"version_count":11,"cve_count":109,"kev_count":11,"last_cve_update":100},28309,"control_rte_\\(for_beckhoff_cx\\)_sl",{"id":122,"product_name":123,"version_count":11,"cve_count":109,"kev_count":11,"last_cve_update":100},28311,"control_rte_\\(sl\\)",{"id":125,"product_name":126,"version_count":11,"cve_count":127,"kev_count":11,"last_cve_update":100},28354,"safety_sil2_runtime_toolkit",16,{"id":129,"product_name":130,"version_count":11,"cve_count":127,"kev_count":11,"last_cve_update":100},28353,"safety_sil2_psp",{"id":132,"product_name":133,"version_count":57,"cve_count":127,"kev_count":11,"last_cve_update":134},28346,"remote_target_visu_toolkit","2023-03-23",{"id":136,"product_name":137,"version_count":57,"cve_count":127,"kev_count":11,"last_cve_update":134},28327,"embedded_target_visu_toolkit",{"id":139,"product_name":140,"version_count":35,"cve_count":141,"kev_count":11,"last_cve_update":27},28290,"control_for_empc-a\\\u002Fimx6",15,{"id":143,"product_name":144,"version_count":35,"cve_count":39,"kev_count":11,"last_cve_update":134},28287,"control_for_beaglebone",{"id":146,"product_name":147,"version_count":148,"cve_count":39,"kev_count":11,"last_cve_update":134},28319,"control_win",8,{"id":150,"product_name":151,"version_count":48,"cve_count":39,"kev_count":11,"last_cve_update":134},28308,"control_rte",{"id":153,"product_name":154,"version_count":155,"cve_count":156,"kev_count":11,"last_cve_update":134},28304,"control_for_raspberry_pi",26,12,{"id":158,"product_name":8,"version_count":159,"cve_count":156,"kev_count":11,"last_cve_update":160},28285,75,"2021-10-26",{"id":162,"product_name":163,"version_count":164,"cve_count":156,"kev_count":11,"last_cve_update":134},28293,"control_for_iot2000",21,{"id":166,"product_name":167,"version_count":90,"cve_count":156,"kev_count":11,"last_cve_update":134},28298,"control_for_pfc100",{"id":169,"product_name":170,"version_count":171,"cve_count":156,"kev_count":11,"last_cve_update":134},28300,"control_for_pfc200",28,{"id":173,"product_name":174,"version_count":52,"cve_count":156,"kev_count":11,"last_cve_update":21},28335,"hmi_sl",{"id":176,"product_name":177,"version_count":113,"cve_count":148,"kev_count":11,"last_cve_update":105},28326,"edge_gateway",{"id":179,"product_name":180,"version_count":66,"cve_count":148,"kev_count":11,"last_cve_update":181},28302,"control_for_plcnext","2022-12-26",{"id":183,"product_name":184,"version_count":89,"cve_count":57,"kev_count":11,"last_cve_update":181},28295,"control_for_linux",{"id":186,"product_name":187,"version_count":11,"cve_count":94,"kev_count":11,"last_cve_update":188},28289,"control_for_beckhoff_cx9020","2022-04-07",{"id":190,"product_name":191,"version_count":164,"cve_count":94,"kev_count":11,"last_cve_update":134},28356,"simulation_runtime",{"id":193,"product_name":194,"version_count":11,"cve_count":94,"kev_count":11,"last_cve_update":195},28360,"v2_web_server","2021-05-25",{"id":197,"product_name":198,"version_count":113,"cve_count":66,"kev_count":11,"last_cve_update":199},28317,"control_runtime_toolkit","2019-08-15",{"id":201,"product_name":202,"version_count":113,"cve_count":203,"kev_count":11,"last_cve_update":134},28349,"runtime_system_toolkit",3,{"id":205,"product_name":206,"version_count":207,"cve_count":203,"kev_count":11,"last_cve_update":105},28306,"control_for_wago_touch_panels_600",1,{"id":209,"product_name":210,"version_count":203,"cve_count":203,"kev_count":11,"last_cve_update":114},28341,"plchandler",{"id":212,"product_name":213,"version_count":207,"cve_count":203,"kev_count":11,"last_cve_update":114},28364,"web_server",{"id":215,"product_name":216,"version_count":203,"cve_count":203,"kev_count":11,"last_cve_update":114},28339,"opc_server",{"id":218,"product_name":219,"version_count":220,"cve_count":220,"kev_count":11,"last_cve_update":134},28318,"control_v3_runtime_system_toolkit",2,{"id":222,"product_name":223,"version_count":113,"cve_count":220,"kev_count":11,"last_cve_update":27},28296,"control_for_linux_arm_sl",{"id":225,"product_name":226,"version_count":207,"cve_count":220,"kev_count":11,"last_cve_update":114},28357,"sp_realtime_nt",{"id":228,"product_name":229,"version_count":11,"cve_count":220,"kev_count":11,"last_cve_update":230},28286,"control","2021-08-03",{"id":232,"product_name":233,"version_count":220,"cve_count":220,"kev_count":11,"last_cve_update":234},28337,"linux","2019-09-17",{"id":236,"product_name":237,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":195},28359,"v2_runtime_system_sp",{"id":239,"product_name":240,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":181},28323,"control_win_v3",{"id":242,"product_name":243,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":181},28315,"control_rte_v3",{"id":245,"product_name":246,"version_count":207,"cve_count":207,"kev_count":11,"last_cve_update":247},28328,"eni_server","2019-10-25",{"id":249,"product_name":250,"version_count":207,"cve_count":207,"kev_count":11,"last_cve_update":251},28329,"ethernetip","2021-08-04",{"id":253,"product_name":254,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":255},28331,"git","2021-12-01",{"id":257,"product_name":258,"version_count":207,"cve_count":207,"kev_count":11,"last_cve_update":259},28284,"automation_server","2021-05-03",{"id":261,"product_name":262,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":181},28336,"hmi_v3",{"id":264,"product_name":265,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":105},28338,"opc_da_server",{"id":267,"product_name":268,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":13},28340,"oscat_basic_library",{"id":270,"product_name":271,"version_count":207,"cve_count":207,"kev_count":11,"last_cve_update":272},28343,"profinet","2022-02-02",{"id":274,"product_name":275,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":199},28344,"raspberry_pi",{"id":277,"product_name":278,"version_count":207,"cve_count":207,"kev_count":11,"last_cve_update":279},28347,"runtime","2020-05-07",{"id":281,"product_name":282,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":134},28348,"runtime_plcwinnt",{"id":284,"product_name":285,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":259},28351,"safety_sil",{"id":287,"product_name":288,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":289},28355,"scripting","2023-07-28",{"id":291,"product_name":292,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":293},28358,"targetvisu_sl","2019-02-19",{"id":295,"product_name":296,"version_count":11,"cve_count":207,"kev_count":11,"last_cve_update":181},28361,"v3_simulation_runtime",{"id":298,"product_name":299,"version_count":220,"cve_count":207,"kev_count":11,"last_cve_update":300},28363,"visualization","2022-08-23",{"id":302,"product_name":303,"version_count":207,"cve_count":11,"kev_count":11,"last_cve_update":304},28362,"virtual_control_sl",null,{"id":306,"product_name":307,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":304},28310,"control_rte_\\\\(for_beckhoff_cx\\\\)_sl",{"id":309,"product_name":310,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":304},28312,"control_rte_\\\\(sl\\\\)",{"id":312,"product_name":313,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":304},28292,"control_for_empc-a\\\\\u002Fimx6_sl",{"id":315,"product_name":316,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":304},28321,"control_win_\\\\(sl\\\\)",{"id":318,"product_name":319,"version_count":207,"cve_count":11,"kev_count":11,"last_cve_update":304},28345,"remote_target_visu",{"id":321,"product_name":322,"version_count":11,"cve_count":11,"kev_count":11,"last_cve_update":304},28334,"hmi_\\\\(sl\\\\)","Codesys is a technology vendor with 81 tracked products and 127 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[325,333,337,341,345,352,356,360,364,370],{"cveId":326,"description":327,"publishedDate":160,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":332},"CVE-2021-34586","In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.",7.5,"v3.1","High",false,0.14109,{"cveId":334,"description":335,"publishedDate":160,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":336},"CVE-2021-34583","Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.",0.08407,{"cveId":338,"description":339,"publishedDate":195,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":340},"CVE-2021-30186","CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.",0.07356,{"cveId":342,"description":343,"publishedDate":195,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":344},"CVE-2021-30195","CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.",0.0718,{"cveId":346,"description":347,"publishedDate":348,"cvssScore":349,"cvssVersion":329,"severity":350,"isKev":331,"epssScore":351},"CVE-2019-13548","CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.","2019-09-13",9.8,"Critical",0.0581,{"cveId":353,"description":354,"publishedDate":348,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":355},"CVE-2019-13532","CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.",0.03152,{"cveId":357,"description":358,"publishedDate":293,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":359},"CVE-2018-20026","Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.",0.03042,{"cveId":361,"description":362,"publishedDate":160,"cvssScore":328,"cvssVersion":329,"severity":330,"isKev":331,"epssScore":363},"CVE-2021-34593","In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.",0.02736,{"cveId":365,"description":366,"publishedDate":367,"cvssScore":349,"cvssVersion":368,"severity":350,"isKev":331,"epssScore":369},"CVE-2017-6027","An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web browser visualization software, are affected: CODESYS Web Server Versions 2.3 and prior. A specially crafted web server request may allow the upload of arbitrary files (with a dangerous type) to the CODESYS Web Server without authorization which may allow remote code execution.","2017-05-19","v3.0",0.02633,{"cveId":371,"description":372,"publishedDate":293,"cvssScore":328,"cvssVersion":368,"severity":330,"isKev":331,"epssScore":373},"CVE-2018-20025","Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.",0.02556,[],[376,377,378,379,380,381,382,383,384,385],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":31,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":33,"product_name":34,"version_count":35,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":37,"product_name":38,"version_count":39,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":41,"product_name":42,"version_count":35,"cve_count":43,"kev_count":11,"last_cve_update":27},{"id":45,"product_name":46,"version_count":47,"cve_count":48,"kev_count":11,"last_cve_update":27},{"id":50,"product_name":51,"version_count":52,"cve_count":53,"kev_count":11,"last_cve_update":21},{"id":55,"product_name":56,"version_count":57,"cve_count":58,"kev_count":11,"last_cve_update":27},{"id":60,"product_name":61,"version_count":62,"cve_count":58,"kev_count":11,"last_cve_update":21},{"title":387,"metaDescription":388,"keywords":389,"structuredData":390},"Codesys - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Codesys covering 81 products with 127 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Codesys vulnerabilities, Codesys security, Codesys CVE, Codesys threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":391,"@type":392,"name":393,"description":388,"url":394},"https:\u002F\u002Fschema.org","Organization","Codesys","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fcodesys",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":396,"apiVersion":397},"2026-10-19T01:23:57.271Z","3.0"]