Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_v2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys V2 (a98536ee-eaca-59c0-9974-0de249def1e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34596 vulnerable 2026-06-08 05:32:14.262314 CODESYS V2 runtime: Access of Uninitialized Pointer may result in denial-of-service
MEDIUM (6.5)
A crafted request may cause a read access to an uninitialized pointer in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition.
Published: 2021-10-26T09:55:54.408Z
Updated: 2024-09-16T22:40:47.921Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34595 vulnerable 2026-06-08 05:32:14.260146 CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service
HIGH (8.1)
A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
Published: 2021-10-26T09:55:52.868Z
Updated: 2024-09-17T03:42:53.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34593 vulnerable 2026-06-08 05:32:14.232200 CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service
HIGH (7.5)
In CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56 unauthenticated crafted invalid requests may result in several denial-of-service conditions. Running PLC programs may be stopped, memory may be leaked, or further communication clients may be blocked from accessing the PLC.
Published: 2021-10-26T09:55:51.381Z
Updated: 2024-09-17T04:10:03.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34586 vulnerable 2026-06-08 05:32:14.200609 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
HIGH (7.5)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests may cause a Null pointer dereference in the CODESYS web server and may result in a denial-of-service condition.
Published: 2021-10-26T09:55:49.885Z
Updated: 2024-09-17T03:53:13.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34585 vulnerable 2026-06-08 05:32:14.198006 CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)
HIGH (7.5)
In the CODESYS V2 web server prior to V1.1.9.22 crafted web server requests can trigger a parser error. Since the parser result is not checked under all conditions, a pointer dereference with an invalid address can occur. This leads to a denial of service situation.
Published: 2021-10-26T09:55:48.273Z
Updated: 2024-09-16T21:58:06.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34584 vulnerable 2026-06-08 05:32:14.195497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34583 vulnerable 2026-06-08 05:32:14.169023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.