Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductControl Win Sl (6d76b640-0075-5027-9747-fe9c92d239db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.922795 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.878641 CODESYS: web server vulnerable to DoS
HIGH (7.5)
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
Published: 2024-09-25T08:04:23.196Z
Updated: 2024-09-25T14:02:28.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37559 vulnerable 2026-06-08 06:08:15.665433 CODESYS Improper Validation of Consistency within Input in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558
Published: 2023-08-03T11:06:56.079Z
Updated: 2024-10-11T18:09:05.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37558 vulnerable 2026-06-08 06:08:15.663259 CODESYS Improper Validation of Consistency within Input in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559
Published: 2023-08-03T11:06:36.112Z
Updated: 2024-10-11T18:09:20.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37557 vulnerable 2026-06-08 06:08:15.661304 CODESYS Heap-based Buffer Overflow in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Published: 2023-08-03T11:06:17.884Z
Updated: 2024-10-09T20:52:16.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37556 vulnerable 2026-06-08 06:08:15.655493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37555 vulnerable 2026-06-08 06:08:15.653511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37554 vulnerable 2026-06-08 06:08:15.651116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37553 vulnerable 2026-06-08 06:08:15.648943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37552 vulnerable 2026-06-08 06:08:15.646468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37551 vulnerable 2026-06-08 06:08:15.644473 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37550 vulnerable 2026-06-08 06:08:15.642412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37549 vulnerable 2026-06-08 06:08:15.639638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37548 vulnerable 2026-06-08 06:08:15.637741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37547 vulnerable 2026-06-08 06:08:15.635854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37546 vulnerable 2026-06-08 06:08:15.633666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37545 vulnerable 2026-06-08 06:08:15.629428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4224 vulnerable 2026-06-08 05:51:37.001203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4046 vulnerable 2026-06-08 05:51:36.645853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22519 vulnerable 2026-06-08 05:40:54.099276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22517 vulnerable 2026-06-08 05:40:54.091807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22516 vulnerable 2026-06-08 05:40:54.078310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22515 vulnerable 2026-06-08 05:40:54.077401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22514 vulnerable 2026-06-08 05:40:54.075597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22513 vulnerable 2026-06-08 05:40:54.068015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36763 vulnerable 2026-06-08 05:32:52.467718 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33485 vulnerable 2026-06-08 05:32:11.505793 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9013 vulnerable 2026-06-08 05:14:24.874787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20026 vulnerable 2026-06-08 05:11:26.569918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20025 vulnerable 2026-06-08 05:11:26.566864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10612 vulnerable 2026-06-08 05:10:35.187140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.