Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:codesys:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductCodesys (11301eff-7da4-52ba-b47d-7c542bf0c1db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-21869 vulnerable 2026-06-08 05:29:13.353556 Details available
HIGH (8.8)
An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-08-25T18:16:38.000Z
Updated: 2024-08-03T18:23:29.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21868 vulnerable 2026-06-08 05:29:13.353158 Details available
HIGH (8.8)
An unsafe deserialization vulnerability exists in the ObjectManager.plugin Project.get_MissingTypes() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-08-18T14:35:11.000Z
Updated: 2024-08-03T18:23:29.614Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21867 vulnerable 2026-06-08 05:29:13.349965 Details available
HIGH (8.8)
An unsafe deserialization vulnerability exists in the ObjectManager.plugin ObjectStream.ProfileByteArray functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-08-18T14:34:52.000Z
Updated: 2024-08-03T18:23:29.533Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21866 vulnerable 2026-06-08 05:29:13.349612 Details available
HIGH (8.8)
A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-08-02T20:33:56.000Z
Updated: 2024-08-03T18:23:29.737Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21865 vulnerable 2026-06-08 05:29:13.349247 Details available
HIGH (8.8)
A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2021-08-02T20:33:52.000Z
Updated: 2024-08-03T18:23:29.545Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21864 vulnerable 2026-06-08 05:29:13.348855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-21863 vulnerable 2026-06-08 05:29:13.346858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.