Control V3 Runtime System Toolkit
Approved changes feed: RSS · Atom
cpe:2.3:a:codesys:control_v3_runtime_system_toolkit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codesys (4a5dbd6f-1914-5b18-8641-403ab498c199) |
|---|---|
| Product | Control V3 Runtime System Toolkit (ce31dc99-e503-534b-807e-d9986a475e32) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-12069 |
vulnerable | 2026-06-08 05:17:56.340409 |
CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25048 |
vulnerable | 2026-06-08 05:11:29.241357 |
Codesys Runtime Improper Limitation of a Pathname
HIGH (8.8)
The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify all system files as well as DoS the device.
Published: 2023-03-23T10:45:36.900Z
Updated: 2025-02-19T21:00:29.711Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.