High severity7.3NVD Advisory· Published May 3, 2021· Updated Jun 17, 2026
CVE-2021-29242
CVE-2021-29242
Description
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.
Affected products
26- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: >=3.0,<4.1.0.0
cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:*range: >=3.0,<3.5.17.0
- cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:*range: >=3.0,<3.5.17.0
cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*range: >=3.0,<3.5.17.0
- (no CPE)range: <3.5.17.0
cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*range: >=3.0,<4.1.0.0
- cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*range: >=3.0,<3.5.17.0
- cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*Range: >=3.0,<3.5.17.0
- cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*Range: >=3.0,<3.5.17.0
- cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:*Range: >=3.0,<3.5.17.0
- CODESYS/Control Runtime systemdescription
Patches
Vulnerability mechanics
References
3- customers.codesys.com/index.phpnvdPermissions RequiredVendor Advisory
- customers.codesys.com/index.phpnvdVendor Advisory
- www.codesys.com/security/security-reports.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.