V3
by Codesys
CVEs (26)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-34583 | 0.00 | — | 0.01 | Oct 26, 2021 | Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22. | |||
| CVE-2019-9012 | 0.00 | — | 0.00 | Aug 15, 2019 | An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions… | |||
| CVE-2019-9013 | 0.00 | — | 0.00 | Aug 15, 2019 | An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all versions containing the… | |||
| CVE-2018-20026 | 0.00 | — | 0.01 | Feb 19, 2019 | Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0. | |||
| CVE-2018-20025 | 0.00 | — | 0.01 | Feb 19, 2019 | Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0. | |||
| CVE-2008-5520 | 0.00 | — | 0.00 | Dec 12, 2008 | AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a… |
- CVE-2021-34583Oct 26, 2021risk 0.00cvss —epss 0.01
Crafted web server requests may cause a heap-based buffer overflow and could therefore trigger a denial-of- service condition due to a crash in the CODESYS V2 web server prior to V1.1.9.22.
- CVE-2019-9012Aug 15, 2019risk 0.00cvss —epss 0.00
An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a denial-of-service condition. All variants of the following CODESYS V3 products in all versions…
- CVE-2019-9013Aug 15, 2019risk 0.00cvss —epss 0.00
An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All variants of the following CODESYS V3 products in all versions containing the…
- CVE-2018-20026Feb 19, 2019risk 0.00cvss —epss 0.01
Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.
- CVE-2018-20025Feb 19, 2019risk 0.00cvss —epss 0.01
Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
- CVE-2008-5520Dec 12, 2008risk 0.00cvss —epss 0.00
AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extension, (2) a…
Page 2 of 2