Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_control_win_(sl):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys Control Win (Sl) (7e8f14d1-ab4c-54a0-9110-4c14849156e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8047 vulnerable 2026-06-08 08:08:58.015470 Out-of-bounds Write in CODESYS Control
HIGH (7.5)
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Published: 2026-05-26T06:49:54.813Z
Updated: 2026-05-26T10:48:24.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8046 vulnerable 2026-06-08 08:08:57.989354 Incorrect Authorization in CODESYS Control
HIGH (8.1)
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.
Published: 2026-05-26T06:45:21.724Z
Updated: 2026-05-26T10:48:37.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3509 vulnerable 2026-06-08 08:01:18.879814 CODESYS Control Audit Log Format String DoS
HIGH (7.5)
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Published: 2026-03-24T07:42:33.820Z
Updated: 2026-03-26T12:35:48.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.909609 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41660 vulnerable 2026-06-08 07:25:07.142387 CODESYS Control Boot Application Replacement Enables Code Execution
HIGH (8.8)
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.
Published: 2026-03-24T07:41:43.004Z
Updated: 2026-03-24T13:16:02.920Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0694 vulnerable 2026-06-08 07:02:25.207215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.900004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5000 vulnerable 2026-06-08 06:56:14.568641 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5751 vulnerable 2026-06-08 06:19:44.632782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37559 vulnerable 2026-06-08 06:08:15.664617 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37558 vulnerable 2026-06-08 06:08:15.662562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37557 vulnerable 2026-06-08 06:08:15.660609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37556 vulnerable 2026-06-08 06:08:15.654705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37555 vulnerable 2026-06-08 06:08:15.652496 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37554 vulnerable 2026-06-08 06:08:15.650253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37553 vulnerable 2026-06-08 06:08:15.648112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37552 vulnerable 2026-06-08 06:08:15.645854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37551 vulnerable 2026-06-08 06:08:15.643989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37550 vulnerable 2026-06-08 06:08:15.641421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37549 vulnerable 2026-06-08 06:08:15.639100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37548 vulnerable 2026-06-08 06:08:15.637164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37547 vulnerable 2026-06-08 06:08:15.634940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37546 vulnerable 2026-06-08 06:08:15.633215 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37545 vulnerable 2026-06-08 06:08:15.612323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4046 vulnerable 2026-06-08 05:51:36.625635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47393 vulnerable 2026-06-08 05:50:40.374333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47392 vulnerable 2026-06-08 05:50:40.371638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47391 vulnerable 2026-06-08 05:50:40.321901 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47390 vulnerable 2026-06-08 05:50:40.319645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47389 vulnerable 2026-06-08 05:50:40.317374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47388 vulnerable 2026-06-08 05:50:40.315110 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47387 vulnerable 2026-06-08 05:50:40.312434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47386 vulnerable 2026-06-08 05:50:40.310472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47385 vulnerable 2026-06-08 05:50:40.308194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47384 vulnerable 2026-06-08 05:50:40.305498 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47383 vulnerable 2026-06-08 05:50:40.303240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47382 vulnerable 2026-06-08 05:50:40.300695 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47381 vulnerable 2026-06-08 05:50:40.298401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47380 vulnerable 2026-06-08 05:50:40.295973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47379 vulnerable 2026-06-08 05:50:40.293987 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47378 vulnerable 2026-06-08 05:50:40.265092 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30792 vulnerable 2026-06-08 05:43:39.772254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30791 vulnerable 2026-06-08 05:43:39.742763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22519 vulnerable 2026-06-08 05:40:54.093888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22517 vulnerable 2026-06-08 05:40:54.079095 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22516 vulnerable 2026-06-08 05:40:54.078135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22515 vulnerable 2026-06-08 05:40:54.076406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22514 vulnerable 2026-06-08 05:40:54.074348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22513 vulnerable 2026-06-08 05:40:54.049198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.