CVE-2021-29242

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages...

Design/Logic Flaw

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity...

Cross site request forgery (csrf)

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

Null pointer dereference

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

Input validation

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages...

CVE-2021-29242

CODESYS Control Runtime system prior to version 3.5.17.0 is affected by an input-validation weakness. A remote attacker can send crafted communication packets to change the router’s addressing scheme and may re-route, add, remove or alter low‑level communication packages. This CVE is documented w...

CVE-2021-29242

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages...

CVE-2021-29239

CVE-2021-29239 (CODESYS Development System) affects CODESYS Development System 3 prior to 3.5.17.0. The issue arises when the system displays or executes malicious documents/files embedded in libraries without validating their integrity, enabling a local attacker to cause high-impact outcomes (as...

CVE-2021-29239

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity...

CVE-2021-29238

CVE-2021-29238 affects CODESYS Automation Server prior to version 1.16.0. The flaw is a cross-site request forgery (CSRF) vulnerability that can allow an attacker to perform authenticated actions on behalf of a user; in wild exposures the THN report describes scenarios leading to elevated privile...

CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29241

CVE-2021-29241 affects CODESYS Gateway V3 prior to version 3.5.16.70. The vulnerability is a NULL pointer dereference in the CmpGateway component that can lead to a denial-of-service condition. Several sources corroborate the issue and its association with the Gateway V3 product line (3S‑Smart/CO...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

PT-2021-7789

Name of the Vulnerable Software and Affected Versions CODESYS Gateway 3 versions prior to 3.5.17.0 Description The issue is related to a NULL pointer dereference error in the CODESYS Gateway 3 software. This error may result in a denial of service DoS. The vulnerability can be exploited by a remo...

3s-smart Software Solutions CODESYS Control 输入验证错误漏洞

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A security vulnerability exists in the CODESYS Control Runtime system prior to version 3.5.17.0, which results from...

3s-smart Software Solutions CODESYS Development System 数据伪造问题漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A security vulnerability exists in CODESYS Development System prior to...

CODESYS 代码问题漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A code issue vulnerability exists in CODESYS Gateway 3 versions prior to 3.5.17.0, which stems from a NULL pointer dereference that could lead to a denial of service DoS...

CODESYS Group CODESYS Automation Server 跨站请求伪造漏洞

CODESYS Group CODESYS Automation Server is an application from the German company CODESYS Group. It is used to manage control tasks. A cross-site request forgery vulnerability exists in CODESYS Group CODESYS Automation Server versions prior to 1.16.0. No detailed vulnerability details are current...

3S CoDeSys (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: 3S-Smart Software Solutions Equipment: CoDeSys Vulnerabilities: Improper Access Control, Relative Path Traversal 2. UPDATE INFORMATION This updated advisory is a...