Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductHmi Sl (18a668d4-54da-5825-b084-a3bbf340a15a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.923521 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.882462 CODESYS: web server vulnerable to DoS
HIGH (7.5)
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
Published: 2024-09-25T08:04:23.196Z
Updated: 2024-09-25T14:02:28.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4224 vulnerable 2026-06-08 05:51:37.003375 CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
HIGH (8.8)
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
Published: 2023-03-23T11:15:37.014Z
Updated: 2026-05-29T14:08:13.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4046 vulnerable 2026-06-08 05:51:36.646398 CODESYS: Improper memory restrictions fro CODESYS Control
HIGH (8.8)
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
Published: 2023-08-03T12:39:44.002Z
Updated: 2026-05-29T14:06:35.326Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31805 vulnerable 2026-06-08 05:44:42.358116 Insecure transmission of credentials
HIGH (7.5)
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Published: 2022-06-24T07:46:15.076Z
Updated: 2024-09-16T18:55:26.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22519 vulnerable 2026-06-08 05:40:54.099327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22517 vulnerable 2026-06-08 05:40:54.091911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22515 vulnerable 2026-06-08 05:40:54.077538 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22514 vulnerable 2026-06-08 05:40:54.075706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22513 vulnerable 2026-06-08 05:40:54.072745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9013 vulnerable 2026-06-08 05:14:24.875690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20026 vulnerable 2026-06-08 05:11:26.571876 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20025 vulnerable 2026-06-08 05:11:26.568488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10612 vulnerable 2026-06-08 05:10:35.188128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.