← All advisories

High severity8.8NVD Advisory· Published May 3, 2021· Updated Jun 17, 2026

CVE-2021-29238

CVE-2021-29238

Description

CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF).

Affected products

3

Codesys/Automation Server3 versions
cpe:2.3:a:codesys:automation_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:codesys:automation_server:*:*:*:*:*:*:*:*range: <1.16.0
- (no CPE)
- (no CPE)range: <1.16.0

Patches

Vulnerability mechanics

References

3

customers.codesys.com/index.phpnvdPermissions RequiredVendor Advisory
customers.codesys.com/index.phpnvdVendor Advisory
www.codesys.com/security/security-reports.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.