2104 matches found
CVE-2021-30190
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...
Stack overflow
CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow...
Out-of-bounds
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read...
Stack overflow
CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow...
Out-of-bounds
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...
Security feature bypass
CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check...
Improper access control
CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control...
Input validation
CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input...
Input validation
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation...
Heap overflow
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
CVE-2021-30195
CVE-2021-30195 affects the CODESYS V2 runtime system prior to 2.4.7.55. The vulnerability is caused by Improper Input Validation, leading to an out-of-bounds read that can cause a denial-of-service. Affected components are the CODESYS Runtime Toolkit 32‑bit full and PLCWinNT prior to 2.4.7.55. Mi...
CVE-2021-30195
CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation...
CVE-2021-30188
CVE-2021-30188 affects the CODESYS V2 runtime system SPs prior to 2.4.7.55. A stack-based buffer overflow in the affected runtime (stack-based CWE-121) can lead to denial of service and, in some cases, remote code execution. Public sources consistently identify the vulnerable component as the COD...
CVE-2021-30186
CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow...
CVE-2021-30186
CVE-2021-30186 affects CODESYS V2 runtime system SP prior to 2.4.7.55, where a heap-based buffer overflow is triggered by a crafted request. Public sources describe this as a vulnerability in the CODESYS Runtime Toolkit/PLCWinNT stack, enabling denial-of-service and, per ICS background, potential...
Command injection
CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command...
CVE-2021-30193
CVE-2021-30193 affects CODESYS V2 Web-Server before 1.1.9.20. The vulnerability is an Out-of-bounds Write in the web server component, enabling crafted requests to write to arbitrary memory in the CODESYS Control runtime (potential remote code execution or crash). Affected products include CODESY...
CVE-2021-30193
CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write...
CVE-2021-30192
CVE-2021-30192 affects CODESYS V2 Web-Server prior to 1.1.9.20. The vulnerability is an Improperly Implemented Security Check (CWE-358) that enables bypass of security protections on the web server, with consequences including the potential to read/write values or upload boot‑related files withou...