Lucene search
+L

1578 matches found

Vulnrichment
Vulnrichment
added 2023/08/03 10:55 a.m.11 views

CVE-2023-3663 CODESYS: Missing integrity check in CODESYS Development System

In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of notifications received via HTTP by the CODESYS notification server...

8.8CVSS8.7AI score0.01021EPSS
SaveExploits0References1
CVE
CVE
added 2023/08/03 10:55 a.m.84 views

CVE-2023-3663

CVE-2023-3663 concerns the CODESYS Development System: versions 3.5.11.0–3.5.19.20 suffer a missing integrity check in the HTTP notification content, allowing an unauthenticated remote attacker to manipulate notifications sent by the CODESYS notification server. This can enable MITM-style manipul...

8.8CVSS8.7AI score0.01021EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.8 views

PT-2023-5006 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: CODESYS affected versions not specified Description: The issue is related to insufficient input validation in the CmpAppForce component of CODESYS products. This can be exploited by a remote attacker to cause a denial-of-service condition...

6.8CVSS6.1AI score0.00626EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.9 views

PT-2023-5005 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: Codesys products affected versions not specified Description: The issue is related to insufficient input validation in the CmpAppForce component of Codesys products. After successful user authentication, an attacker can send crafted network...

6.8CVSS6AI score0.00626EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.12 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.6 views

PT-2023-5014 · 3S Smart Software Solutions · Codesys Cmpapp

Name of the Vulnerable Software and Affected Versions: CODESYS CMPapp affected versions not specified Description: The issue is related to insufficient input validation in the CMPapp component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of service...

6.8CVSS6.2AI score0.00626EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.10 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.9 views

CODESYS Development System Data Falsification Issue Vulnerability

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3s-smart Software Solutions, Germany. A data forgery vulnerability exists in CODESYS Development System versions 3.5.11.20 through 3.5.19.2...

8.8CVSS6.8AI score0.01021EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.14 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.10 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.4 views

PT-2023-5019 · 3S Smart Software Solutions · Codesys Cmpapp

Name of the Vulnerable Software and Affected Versions: CODESYS CMPapp affected versions not specified Description: The issue is related to insufficient input validation in the CMPapp component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of service...

6.8CVSS6.2AI score0.00626EPSS
SaveExploits0References11
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.10 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2023/08/03 12:00 a.m.24 views

CODESYS Development System Exposure of Resource to Wrong Sphere Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of CODESYS Development System. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.3CVSS7.2AI score0.002EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.9 views

CODESYS Control Buffer Error Vulnerability

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3s-smart Software Solutions, Germany. CODESYS Control suffers from a buffer error vulnerability that arises from improper restriction of memory buffer ranges, allowing a remote attacker...

8.8CVSS7.2AI score0.00878EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.20 views

PT-2023-25635 · 3S Smart Software Solutions · Codesys Development System

Name of the Vulnerable Software and Affected Versions: CODESYS Development System versions 3.5.17.0 through 3.5.19.20 Description: A vulnerability in the CODESYS Development System allows for the execution of binaries from the current working directory in the user's context. Recommendations: For...

7.3CVSS7.1AI score0.00211EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.3 views

PT-2023-5010 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: CODESYS versions affected versions not specified Description: The issue is related to insufficient input validation in the CMPappBP component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of servic...

6.8CVSS6.2AI score0.00626EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.7 views

PT-2023-5011 · 3S Smart Software Solutions · Codesys

Name of the Vulnerable Software and Affected Versions: CODESYS versions affected versions not specified Description: The issue is related to insufficient input validation in the CMPappBP component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of servic...

6.8CVSS6.2AI score0.00626EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.12 views

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.12 views

CODESYS Development System Code Issue Vulnerability

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3s-smart Software Solutions, Germany. A code issue vulnerability exists in CODESYS Development System versions 3.5.17.0 through 3.5.19.20,...

7.3CVSS7.2AI score0.00211EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/08/03 12:00 a.m.8 views

PT-2023-5016 · 3S Smart Software Solutions · Codesys Cmpapp

Name of the Vulnerable Software and Affected Versions: CODESYS CMPapp affected versions not specified Description: The issue is related to insufficient input validation in the CMPapp component of CODESYS software products. This can be exploited by a remote attacker to cause a denial of service...

6.8CVSS6.2AI score0.00626EPSS
SaveExploits0References11
Rows per page
Query Builder