CVE-2019-5105

An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet can cause a large memcpy, resulting in an access violation and termination of the process. An attacker can send a packet...

CVE-2024-5000

An unauthenticated remote attacker can use a malicious OPC UA client to send a crafted request to affected CODESYS products which can cause a DoS due to incorrect calculation of buffer size...

CVE-2024-8175

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

FESTO CODESYS

GENERAL RECOMMENDATION As part of a security strategy, Festo recommends the following general defense measures to reduce the risk of exploits: - Use controllers and devices only in a protected environment to minimize network exposure and ensure that they are not accessible from outside - Use...

The vulnerability of CODESYS V3 microprogramming software for WAGO controllers allows a hacker to gain full access to the controller or cause a service failure.

The vulnerability of CODESYS V3 microprogramming software for WAGO controllers is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to gain full access to the controller or cause service failures...

CVE-2024-41969

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS...

CVE-2024-41969 WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS...

CVE-2024-41969

CVE-2024-41969 affects WAGO devices via a CODESYS V3 configuration service authentication bypass. A low-privilege remote attacker can modify configuration, potentially achieving full system compromise or DoS. Root cause: missing authentication in the CODESYS V3 service. Affected products referenc...

CVE-2024-41969 WAGO: CODESYS V3 Configuration Authentication Bypass in Multiple Devices

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS...

WAGO多款产品 访问控制错误漏洞

WAGO PFC100 and others are products of WAGO, Germany.WAGO PFC100 is a programmable logic controller PLC.WAGO CC100 0751-9x01 is a compact controller.WAGO Edge Controller 0752-8303/8000-0002 is a controller. An access control error vulnerability exists in various WAGO products. The vulnerability...

CVE-2024-41969: Missing Authentication for Critical Function

A low privileged remote attacker may modify the configuration of the CODESYS V3 service through a missing authentication vulnerability which could lead to full system access and/or DoS...

Festo CODESYS V3 Products Use of Password Hash With Insufficient Computational Effort (CVE-2020-12069)

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device. This plugin...

The vulnerability in the CODESYS web server environment allows a attacker to cause a service failure.

The vulnerability in the CODESYS web server’s execution environment related to CODESYS Control is due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures by sending a specially crafte...

CVE-2024-8175

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

CVE-2024-8175 CODESYS: web server vulnerable to DoS

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

CVE-2024-8175 CODESYS: web server vulnerable to DoS

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

CVE-2024-8175

CVE-2024-8175 affects the CODESYS web server. An unauthenticated remote attacker can cause the web server to access invalid memory, leading to a DoS. The available documents identify the root cause as insufficient checking of unusual/exceptions in the web server (per PT-2024-6449), and note the i...

CODESYS 代码问题漏洞

CODESYS is an industrial control automation software from CODESYS, a German company. CODESYS suffers from a code issue vulnerability that originates from an unauthenticated, remote attacker who can cause the server to access invalid memory, resulting in a denial of service...

CVE-2024-8175: Improper Check for Unusual or Exceptional Conditions

An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS...

PT-2024-6449 · 3S Smart Software Solutions · Codesys Control

Name of the Vulnerable Software and Affected Versions: CODESYS Control affected versions not specified Description: The issue is related to insufficient checking of unusual or exceptional states in the CODESYS web server, which can be exploited by a remote attacker to cause a denial of service Do...