Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductControl For Plcnext Sl (19aaedf2-adc4-5c6f-a42b-2cd9fd499799)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.918466 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41691 vulnerable 2026-06-08 07:25:07.232013 CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
HIGH (7.5)
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-08-04T08:04:34.981Z
Updated: 2025-08-04T16:32:30.773Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41659 vulnerable 2026-06-08 07:25:07.137530 CODESYS Control PKI Exposure Enables Remote Certificate Access
HIGH (8.3)
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted communication is possible if the certificates are deleted.
Published: 2025-08-04T08:04:04.597Z
Updated: 2025-08-04T16:35:32.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41658 vulnerable 2026-06-08 07:25:07.123179 CODESYS Toolkit Exposes Sensitive Files via Default Permissions
MEDIUM (5.5)
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.
Published: 2025-08-04T08:03:26.511Z
Updated: 2025-08-04T11:52:37.949Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.862997 CODESYS: web server vulnerable to DoS
HIGH (7.5)
An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.
Published: 2024-09-25T08:04:23.196Z
Updated: 2024-09-25T14:02:28.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5000 vulnerable 2026-06-08 06:56:14.547161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6357 vulnerable 2026-06-08 06:19:47.040851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37559 vulnerable 2026-06-08 06:08:15.664999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37558 vulnerable 2026-06-08 06:08:15.663046 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37557 vulnerable 2026-06-08 06:08:15.661081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37556 vulnerable 2026-06-08 06:08:15.655280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37555 vulnerable 2026-06-08 06:08:15.653087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37554 vulnerable 2026-06-08 06:08:15.650921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37553 vulnerable 2026-06-08 06:08:15.648662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37552 vulnerable 2026-06-08 06:08:15.646252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37551 vulnerable 2026-06-08 06:08:15.644273 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37550 vulnerable 2026-06-08 06:08:15.642109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37549 vulnerable 2026-06-08 06:08:15.639294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37548 vulnerable 2026-06-08 06:08:15.637630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37547 vulnerable 2026-06-08 06:08:15.635631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37546 vulnerable 2026-06-08 06:08:15.633420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37545 vulnerable 2026-06-08 06:08:15.623485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4224 vulnerable 2026-06-08 05:51:37.000984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4046 vulnerable 2026-06-08 05:51:36.638726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47393 vulnerable 2026-06-08 05:50:40.375389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47392 vulnerable 2026-06-08 05:50:40.372774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47391 vulnerable 2026-06-08 05:50:40.366357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47390 vulnerable 2026-06-08 05:50:40.320618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47389 vulnerable 2026-06-08 05:50:40.318561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47388 vulnerable 2026-06-08 05:50:40.316100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47387 vulnerable 2026-06-08 05:50:40.313674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47386 vulnerable 2026-06-08 05:50:40.311226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47385 vulnerable 2026-06-08 05:50:40.309073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47384 vulnerable 2026-06-08 05:50:40.307160 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47383 vulnerable 2026-06-08 05:50:40.304405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47382 vulnerable 2026-06-08 05:50:40.301781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47381 vulnerable 2026-06-08 05:50:40.299374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47380 vulnerable 2026-06-08 05:50:40.297044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47379 vulnerable 2026-06-08 05:50:40.294819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47378 vulnerable 2026-06-08 05:50:40.284777 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22519 vulnerable 2026-06-08 05:40:54.099075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22517 vulnerable 2026-06-08 05:40:54.091611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22515 vulnerable 2026-06-08 05:40:54.077100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22514 vulnerable 2026-06-08 05:40:54.075288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22513 vulnerable 2026-06-08 05:40:54.063002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22508 vulnerable 2026-06-08 05:40:53.886328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29242 vulnerable 2026-06-08 05:31:26.043794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.