Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:control_for_pfc200:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductControl For Pfc200 (13c41ba8-8cd3-51f4-8e92-8199544301b6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-7052 vulnerable 2026-06-08 05:27:11.837597 Details available
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Published: 2020-01-24T19:31:59.000Z
Updated: 2024-08-04T09:18:02.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15806 vulnerable 2026-06-08 05:19:26.848517 Details available
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
Published: 2020-07-22T18:14:43.000Z
Updated: 2024-08-04T13:30:22.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12069 vulnerable 2026-06-08 05:17:56.337885 CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12068 vulnerable 2026-06-08 05:17:56.327919 Details available
An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
Published: 2020-05-14T20:29:21.000Z
Updated: 2024-08-04T11:48:57.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10245 vulnerable 2026-06-08 05:16:34.935175 Details available
CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
Published: 2020-03-26T03:45:20.000Z
Updated: 2024-08-04T10:58:39.676Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9009 vulnerable 2026-06-08 05:14:24.855610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9008 vulnerable 2026-06-08 05:14:24.851673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18858 vulnerable 2026-06-08 05:13:12.451742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13548 vulnerable 2026-06-08 05:12:52.091113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13542 vulnerable 2026-06-08 05:12:52.082073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13532 vulnerable 2026-06-08 05:12:52.055898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25048 vulnerable 2026-06-08 05:11:29.237712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.