Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:control_for_plcnext:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductControl For Plcnext (0e3f78dc-df22-59a8-b273-54253ecdc093)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30792 vulnerable 2026-06-08 05:43:39.773439 CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
HIGH (7.5)
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
Published: 2022-07-11T10:40:43.935Z
Updated: 2024-09-16T23:05:31.037Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30791 vulnerable 2026-06-08 05:43:39.761210 CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
HIGH (7.5)
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
Published: 2022-07-11T10:40:38.913Z
Updated: 2024-09-16T16:48:31.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-7052 vulnerable 2026-06-08 05:27:11.838518 Details available
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
Published: 2020-01-24T19:31:59.000Z
Updated: 2024-08-04T09:18:02.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15806 vulnerable 2026-06-08 05:19:26.849288 Details available
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
Published: 2020-07-22T18:14:43.000Z
Updated: 2024-08-04T13:30:22.371Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12069 vulnerable 2026-06-08 05:17:56.337991 CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12068 vulnerable 2026-06-08 05:17:56.328707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10245 vulnerable 2026-06-08 05:16:34.935852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-18858 vulnerable 2026-06-08 05:13:12.452229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.