CODESYS Control runtime system
by Codesys
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-33485 | Cri | 0.64 | 9.8 | 0.01 | Aug 3, 2021 | CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. | ||
| CVE-2025-41660 | Hig | 0.57 | 8.8 | 0.00 | Mar 24, 2026 | A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution. | ||
| CVE-2020-15806 | Hig | 0.49 | 7.5 | 0.02 | Jul 22, 2020 | CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation. | ||
| CVE-2021-29242 | Hig | 0.48 | 7.3 | 0.01 | May 3, 2021 | CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages. |
- risk 0.64cvss 9.8epss 0.01
CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
- risk 0.57cvss 8.8epss 0.00
A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.
- risk 0.49cvss 7.5epss 0.02
CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
- risk 0.48cvss 7.3epss 0.01
CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages.