Codesys Control For Linux Arm Sl

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_control_for_linux_arm_sl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys Control For Linux Arm Sl (03a50409-21ca-5512-92a0-6ece6e2af14e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8047 vulnerable 2026-06-08 08:08:58.015882 Out-of-bounds Write in CODESYS Control
HIGH (7.5)
The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affected device.
Published: 2026-05-26T06:49:54.813Z
Updated: 2026-05-26T10:48:24.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8046 vulnerable 2026-06-08 08:08:57.996954 Incorrect Authorization in CODESYS Control
HIGH (8.1)
The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.
Published: 2026-05-26T06:45:21.724Z
Updated: 2026-05-26T10:48:37.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3509 vulnerable 2026-06-08 08:01:18.884362 CODESYS Control Audit Log Format String DoS
HIGH (7.5)
An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.
Published: 2026-03-24T07:42:33.820Z
Updated: 2026-03-26T12:35:48.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41739 vulnerable 2026-06-08 07:25:07.926190 CODESYS Control - Linux/QNX SysSocket flaw
MEDIUM (5.9)
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
Published: 2025-12-01T10:00:44.373Z
Updated: 2026-01-07T17:09:52.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.915221 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41660 vulnerable 2026-06-08 07:25:07.147996 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0694 vulnerable 2026-06-08 07:02:25.197184 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8175 vulnerable 2026-06-08 07:00:22.890687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5000 vulnerable 2026-06-08 06:56:14.560745 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6357 vulnerable 2026-06-08 06:19:47.025925 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.