Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductSafety Sil2 (1fc76041-9767-50d5-b779-4e8e203388bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37559 vulnerable 2026-06-08 06:08:15.665564 CODESYS Improper Validation of Consistency within Input in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37558
Published: 2023-08-03T11:06:56.079Z
Updated: 2024-10-11T18:09:05.823Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37558 vulnerable 2026-06-08 06:08:15.663313 CODESYS Improper Validation of Consistency within Input in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37559
Published: 2023-08-03T11:06:36.112Z
Updated: 2024-10-11T18:09:20.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37557 vulnerable 2026-06-08 06:08:15.661361 CODESYS Heap-based Buffer Overflow in multiple products
MEDIUM (6.5)
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based buffer, which can lead to a denial-of-service condition.
Published: 2023-08-03T11:06:17.884Z
Updated: 2024-10-09T20:52:16.817Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37556 vulnerable 2026-06-08 06:08:15.655641 CODESYS Improper Input Validation in CmpAppBP
MEDIUM (6.5)
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37555.
Published: 2023-08-03T11:05:52.986Z
Updated: 2024-10-09T20:52:36.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37555 vulnerable 2026-06-08 06:08:15.653568 CODESYS Improper Input Validation in CmpAppBP
MEDIUM (6.5)
In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP component to read internally from an invalid address, potentially leading to a denial-of-service condition. This vulnerability is different to CVE-2023-37552, CVE-2023-37553, CVE-2023-37554 and CVE-2023-37556.
Published: 2023-08-03T11:05:33.660Z
Updated: 2024-10-09T20:52:51.974Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37554 vulnerable 2026-06-08 06:08:15.651180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37553 vulnerable 2026-06-08 06:08:15.649004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37552 vulnerable 2026-06-08 06:08:15.646634 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37551 vulnerable 2026-06-08 06:08:15.644610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37550 vulnerable 2026-06-08 06:08:15.642463 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37549 vulnerable 2026-06-08 06:08:15.639795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37548 vulnerable 2026-06-08 06:08:15.637891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37547 vulnerable 2026-06-08 06:08:15.635990 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37546 vulnerable 2026-06-08 06:08:15.633721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37545 vulnerable 2026-06-08 06:08:15.631710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4224 vulnerable 2026-06-08 05:51:37.004453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7052 vulnerable 2026-06-08 05:27:11.844782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9009 vulnerable 2026-06-08 05:14:24.859732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20026 vulnerable 2026-06-08 05:11:26.573413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-20025 vulnerable 2026-06-08 05:11:26.568964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.