Control For Plcnext

control_for_plcnext

Vendor: Codesys • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-12069 4Codesys FestoPilz+1 more 64750 8100 Firmware 750 8101 Firmware750 8102 Firmware+61 more Jun 17, 2026 Dec 26, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local a...Show more In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.Show less
CVE-2022-30792 1Codesys 19Control For Beaglebone Control For Empc A/imx6Control For Iot2000 Sl+16 more Jun 17, 2026 Jul 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
CVE-2022-30791 1Codesys 19Control For Beaglebone Control For Empc A/imx6Control For Iot2000 Sl+16 more Jun 17, 2026 Jul 11, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
CVE-2020-15806 1Codesys 16Control For Beaglebone Control For Empc A/imx6Control For Iot2000+13 more Jun 17, 2026 Jul 22, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
CVE-2020-12068 1Codesys 12Control For Beaglebone Control For Empc A/imx6Control For Iot2000+9 more Jun 17, 2026 May 14, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.
CVE-2020-10245 1Codesys 14Control For Beaglebone Control For Empc A/imx6Control For Iot2000+11 more Jun 17, 2026 Mar 26, 2020 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
CVE-2020-7052 1Codesys 15Control For Beaglebone Control For Empc A/imx6Control For Iot2000+12 more Jun 17, 2026 Jan 24, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.
CVE-2019-18858 1Codesys 14Control For Beaglebone Control For Empc A/imx6Control For Iot2000+11 more Jun 17, 2026 Nov 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.