Approved changes feed: RSS · Atom
cpe:2.3:a:codesys:codesys:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codesys (4a5dbd6f-1914-5b18-8641-403ab498c199) |
|---|---|
| Product | Codesys (ce2275e0-858a-5521-bade-0722e05594e3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41700 |
vulnerable | 2026-06-08 07:25:07.760702 |
CODESYS Development System - Deserialization of Untrusted Data
HIGH (7.8)
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.
Published: 2025-12-01T10:02:47.312Z
Updated: 2025-12-01T13:59:26.310Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34596 |
vulnerable | 2026-06-08 05:32:14.263563 |
CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
MEDIUM (6.5)
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.
Published: 2021-10-26T09:55:54.408Z
Updated: 2024-09-16T22:40:47.921Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34595 |
vulnerable | 2026-06-08 05:32:14.261612 |
CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
HIGH (8.1)
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
Published: 2021-10-26T09:55:52.868Z
Updated: 2024-09-17T03:42:53.986Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34586 |
vulnerable | 2026-06-08 05:32:14.200651 |
CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
HIGH (7.5)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
Published: 2021-10-26T09:55:49.885Z
Updated: 2024-09-17T03:53:13.043Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34585 |
vulnerable | 2026-06-08 05:32:14.198053 |
CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)
HIGH (7.5)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
Published: 2021-10-26T09:55:48.273Z
Updated: 2024-09-16T21:58:06.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34584 |
vulnerable | 2026-06-08 05:32:14.195550 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34583 |
vulnerable | 2026-06-08 05:32:14.170170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16265 |
vulnerable | 2026-06-08 05:13:08.078651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13538 |
vulnerable | 2026-06-08 05:12:52.073420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.