Control Rte Sl \(for Beckhoff Cx\)
by Codesys
CVEs (28)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-37551 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. In contrast to the regular file download… | ||
| CVE-2023-37550 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2023-37549 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2023-37548 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2023-37547 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2023-37546 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2023-37545 | Med | 0.42 | 6.5 | 0.01 | Aug 3, 2023 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a… | ||
| CVE-2022-22513 | Med | 0.42 | 6.5 | 0.01 | Apr 7, 2022 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash. |
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to download files with any file extensions to the controller. In contrast to the regular file download…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpApp component to read internally from an invalid address, potentially leading to a…
- risk 0.42cvss 6.5epss 0.01
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
Page 2 of 2