CVE-2021-29238

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

CVE-2021-29241

CVE-2021-29241 affects CODESYS Gateway V3 prior to version 3.5.16.70. The vulnerability is a NULL pointer dereference in the CmpGateway component that can lead to a denial-of-service condition. Several sources corroborate the issue and its association with the Gateway V3 product line (3S‑Smart/CO...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29241

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

PT-2021-7789

Name of the Vulnerable Software and Affected Versions CODESYS Gateway 3 versions prior to 3.5.17.0 Description The issue is related to a NULL pointer dereference error in the CODESYS Gateway 3 software. This error may result in a denial of service DoS. The vulnerability can be exploited by a remo...

CVE-2021-29238: Cross-Site Request Forgery (CSRF)

CODESYS Automation Server before 1.16.0 allows cross-site request forgery CSRF...

3s-smart Software Solutions CODESYS Control 输入验证错误漏洞

3s-smart Software Solutions CODESYS Control is a suite of industrial control program programming software from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A security vulnerability exists in the CODESYS Control Runtime system prior to version 3.5.17.0, which results from...

CVE-2021-29239: Insufficient Verification of Data Authenticity

CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity...

3s-smart Software Solutions CODESYS Development System 数据伪造问题漏洞

3s-smart Software Solutions CODESYS Development System is a suite of programming tools for the field of industrial controllers and automation technology from 3S-Smart Software Solutions 3s-smart Software Solutions, Germany. A security vulnerability exists in CODESYS Development System prior to...

CODESYS 代码问题漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A code issue vulnerability exists in CODESYS Gateway 3 versions prior to 3.5.17.0, which stems from a NULL pointer dereference that could lead to a denial of service DoS...

CODESYS Group CODESYS Automation Server 跨站请求伪造漏洞

CODESYS Group CODESYS Automation Server is an application from the German company CODESYS Group. It is used to manage control tasks. A cross-site request forgery vulnerability exists in CODESYS Group CODESYS Automation Server versions prior to 1.16.0. No detailed vulnerability details are current...

CVE-2021-29241: NULL Pointer Dereference

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service DoS...

CVE-2021-29242: Improper Input Validation

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages...

3S CoDeSys (Update A)

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit/public exploits are available Vendor: 3S-Smart Software Solutions Equipment: CoDeSys Vulnerabilities: Improper Access Control, Relative Path Traversal 2. UPDATE INFORMATION This updated advisory is a...

3S-Smart Software Solutions CODESYS Control Denial of Service Vulnerability

3S-Smart Software Solutions CODESYS Control is a suite of industrial control program programming software. A denial of service vulnerability exists in 3S-Smart Software Solutions CODESYS Control. The vulnerability allows remote attackers to submit a specific request, which can be exploited to...

CVE-2020-15806

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation...

CVE-2020-15806

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation...

Design/Logic Flaw

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation...

CVE-2020-15806

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation...

CVE-2020-15806

CVE-2020-15806 affects the CODESYS Control runtime system before 3.5.16.10. The issue is Uncontrolled Memory Allocation, which can cause the runtime to crash and, per linked sources, may lead to a denial of service. Technical details in the connected documents confirm the vulnerable component and...