CVE-2021-29242

Published: May 3, 2021Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: NVD

Description

CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.

Affected (24)

Products: Codesys: Control For Beaglebone Sl, Control For Empc A/imx6 Sl, Control For Iot2000 Sl, Control For Linux Arm Sl, Control For Linux Sl, Control For Pfc100 Sl, Control For Pfc200 Sl, Control For Plcnext Sl, Control For Raspberry Pi Sl, Control For Wago Touch Panels 600 Sl, Control Rte, Control Runtime System Toolkit, Control Win, Edge Gateway, Embedded Target Visu Toolkit, Gateway, Hmi, Opc Server, Plchandler, Remote Target Visu Toolkit, Safety Sil, Simulation Runtime

Codesys

22 products

Control For Beaglebone Sl

Control For Empc A/imx6 Sl

Control For Iot2000 Sl

Control For Linux Arm Sl

Control For Linux Sl

Control For Pfc100 Sl

Control For Pfc200 Sl

Control For Plcnext Sl

Control For Raspberry Pi Sl

Control For Wago Touch Panels 600 Sl

Control Rte

Control Runtime System Toolkit

Control Win

Edge Gateway

Embedded Target Visu Toolkit

Remote Target Visu Toolkit

Safety Sil

Simulation Runtime

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Codesys Control For Beaglebone Sl	From 3.0 to 4.1.0.0
Codesys Control For Empc A/imx6 Sl	From 3.0 to 4.1.0.0
Codesys Control For Iot2000 Sl	From 3.0 to 4.1.0.0
Codesys Control For Linux Arm Sl	From 3.0 to 4.1.0.0
Codesys Control For Linux Sl	From 3.0 to 4.1.0.0
Codesys Control For Pfc100 Sl	From 3.0 to 4.1.0.0
Codesys Control For Pfc200 Sl	From 3.0 to 4.1.0.0
Codesys Control For Plcnext Sl	From 3.0 to 4.1.0.0
Codesys Control For Raspberry Pi Sl	From 3.0 to 4.1.0.0
Codesys Control For Wago Touch Panels 600 Sl	From 3.0 to 4.1.0.0
Codesys Control Rte	From 3.0 to 3.5.17.0
Codesys Control Rte	From 3.0 to 3.5.17.0
Codesys Control Runtime System Toolkit	From 3.0 to 3.5.17.0
Codesys Control Win	From 3.0 to 3.5.17.0
Codesys Edge Gateway	From 3.0 to 4.1.0.0
Codesys Edge Gateway	From 3.0 to 3.5.17.0
Codesys Embedded Target Visu Toolkit	From 3.0 to 3.5.17.0
Codesys Gateway	From 3.0 to 3.5.17.0
Codesys Hmi	From 3.0 to 3.5.17.0
Codesys Opc Server	From 3.0 to 3.5.17.0
Codesys Plchandler	From 3.0 to 3.5.17.0
Codesys Remote Target Visu Toolkit	From 3.0 to 3.5.17.0
Codesys Safety Sil	From 3.0 to 3.5.17.0
Codesys Simulation Runtime	From 3.0 to 3.5.17.0