Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_control_for_iot2000_sl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys Control For Iot2000 Sl (d1001cf7-bbf2-519b-a0f8-cb45ea850fd7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8047 vulnerable 2026-06-08 08:08:58.015856 Out-of-bounds Write in CODESYS Control
HIGH (7.5)
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Published: 2026-05-26T06:49:54.813Z
Updated: 2026-05-26T10:48:24.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8046 vulnerable 2026-06-08 08:08:57.995670 Incorrect Authorization in CODESYS Control
HIGH (8.1)
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.
Published: 2026-05-26T06:45:21.724Z
Updated: 2026-05-26T10:48:37.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3509 vulnerable 2026-06-08 08:01:18.883263 CODESYS Control Audit Log Format String DoS
HIGH (7.5)
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Published: 2026-03-24T07:42:33.820Z
Updated: 2026-03-26T12:35:48.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41739 vulnerable 2026-06-08 07:25:07.926170 CODESYS Control - Linux/QNX SysSocket flaw
MEDIUM (5.9)
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
Published: 2025-12-01T10:00:44.373Z
Updated: 2026-01-07T17:09:52.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.915199 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41660 vulnerable 2026-06-08 07:25:07.147091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0694 vulnerable 2026-06-08 07:02:25.196176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.889950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5000 vulnerable 2026-06-08 06:56:14.559769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6357 vulnerable 2026-06-08 06:19:47.025283 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37559 vulnerable 2026-06-08 06:08:15.664002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37558 vulnerable 2026-06-08 06:08:15.662239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37557 vulnerable 2026-06-08 06:08:15.656610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37556 vulnerable 2026-06-08 06:08:15.654387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37555 vulnerable 2026-06-08 06:08:15.652080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37554 vulnerable 2026-06-08 06:08:15.649924 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37553 vulnerable 2026-06-08 06:08:15.647459 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37552 vulnerable 2026-06-08 06:08:15.645350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37551 vulnerable 2026-06-08 06:08:15.643292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37550 vulnerable 2026-06-08 06:08:15.640831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37549 vulnerable 2026-06-08 06:08:15.638786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37548 vulnerable 2026-06-08 06:08:15.636792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37547 vulnerable 2026-06-08 06:08:15.634510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37546 vulnerable 2026-06-08 06:08:15.632655 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-37545 vulnerable 2026-06-08 06:08:15.604979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4046 vulnerable 2026-06-08 05:51:36.618080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47393 vulnerable 2026-06-08 05:50:40.374659 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47392 vulnerable 2026-06-08 05:50:40.371989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47391 vulnerable 2026-06-08 05:50:40.363527 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47390 vulnerable 2026-06-08 05:50:40.320010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47389 vulnerable 2026-06-08 05:50:40.318114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47388 vulnerable 2026-06-08 05:50:40.315434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47387 vulnerable 2026-06-08 05:50:40.312926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47386 vulnerable 2026-06-08 05:50:40.310725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47385 vulnerable 2026-06-08 05:50:40.308662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47384 vulnerable 2026-06-08 05:50:40.305961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47383 vulnerable 2026-06-08 05:50:40.303709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47382 vulnerable 2026-06-08 05:50:40.301018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47381 vulnerable 2026-06-08 05:50:40.298966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47380 vulnerable 2026-06-08 05:50:40.296590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47379 vulnerable 2026-06-08 05:50:40.294344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47378 vulnerable 2026-06-08 05:50:40.270814 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30792 vulnerable 2026-06-08 05:43:39.772721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-30791 vulnerable 2026-06-08 05:43:39.750299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22519 vulnerable 2026-06-08 05:40:54.094230 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22518 vulnerable 2026-06-08 05:40:54.092692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22517 vulnerable 2026-06-08 05:40:54.079607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22515 vulnerable 2026-06-08 05:40:54.076846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22514 vulnerable 2026-06-08 05:40:54.074673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22513 vulnerable 2026-06-08 05:40:54.056845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.