Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:control_for_iot2000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductControl For Iot2000 (43f0e85e-327b-5287-bf22-67bbfc3543dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7052 vulnerable 2026-06-08 05:27:11.834345 Details available
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Published: 2020-01-24T19:31:59.000Z
Updated: 2024-08-04T09:18:02.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15806 vulnerable 2026-06-08 05:19:26.841869 Details available
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
Published: 2020-07-22T18:14:43.000Z
Updated: 2024-08-04T13:30:22.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12069 vulnerable 2026-06-08 05:17:56.336184 CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12068 vulnerable 2026-06-08 05:17:56.322745 Details available
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Published: 2020-05-14T20:29:21.000Z
Updated: 2024-08-04T11:48:57.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10245 vulnerable 2026-06-08 05:16:34.933139 Details available
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
Published: 2020-03-26T03:45:20.000Z
Updated: 2024-08-04T10:58:39.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9009 vulnerable 2026-06-08 05:14:24.855572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9008 vulnerable 2026-06-08 05:14:24.850148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18858 vulnerable 2026-06-08 05:13:12.449951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13548 vulnerable 2026-06-08 05:12:52.091058 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13542 vulnerable 2026-06-08 05:12:52.082033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13532 vulnerable 2026-06-08 05:12:52.053560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25048 vulnerable 2026-06-08 05:11:29.236255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.