Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductSafety Sil2 Runtime Toolkit (8e7c3f46-903c-5432-b57b-2a209acb5625)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4224 vulnerable 2026-06-08 05:51:36.998141 CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3
HIGH (8.8)
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
Published: 2023-03-23T11:15:37.014Z
Updated: 2026-05-29T14:08:13.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47393 vulnerable 2026-06-08 05:50:40.375728 CODESYS: Multiple products prone to improperly restricted memory operations
MEDIUM (6.5)
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
Published: 2023-05-15T10:03:58.680Z
Updated: 2025-03-05T18:59:25.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47392 vulnerable 2026-06-08 05:50:40.373467 CODESYS: Multiple products prone to Improper Input Validation
MEDIUM (6.5)
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
Published: 2023-05-15T10:01:09.224Z
Updated: 2025-03-05T18:59:32.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47391 vulnerable 2026-06-08 05:50:40.370816 CODESYS: Multiple products prone to Improper Input Validation
HIGH (7.5)
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
Published: 2023-05-15T09:59:52.803Z
Updated: 2025-01-23T19:19:22.826Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47390 vulnerable 2026-06-08 05:50:40.321114 CODESYS: Multiple products prone to stack based out-of-bounds write
HIGH (8.8)
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Published: 2023-05-15T09:58:21.588Z
Updated: 2025-03-05T18:59:40.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47389 vulnerable 2026-06-08 05:50:40.318933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47388 vulnerable 2026-06-08 05:50:40.316599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47387 vulnerable 2026-06-08 05:50:40.314342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47386 vulnerable 2026-06-08 05:50:40.311686 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47385 vulnerable 2026-06-08 05:50:40.309627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47384 vulnerable 2026-06-08 05:50:40.307448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47383 vulnerable 2026-06-08 05:50:40.304823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47382 vulnerable 2026-06-08 05:50:40.302422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47381 vulnerable 2026-06-08 05:50:40.299886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47380 vulnerable 2026-06-08 05:50:40.297657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47379 vulnerable 2026-06-08 05:50:40.295310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47378 vulnerable 2026-06-08 05:50:40.293120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.