CODESYS CODESYS Control for Beckhoff CX9020 SL

8 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2022-30792CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channelsHIGH 7.50.9 %
CVE-2022-30791CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connectionsHIGH 7.50.9 %
CVE-2022-22519Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.HIGH 7.51.7 %
CVE-2022-22518V4.5.0.0 – < V4.5.0.0A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.MEDIUM 6.50.6 %
CVE-2022-22517Communication Components in multiple CODESYS products vulnerable to communication channel disruptionHIGH 7.51.5 %
CVE-2022-22515A component of the CODESYS Control runtime system allows read and write access to configuration filesHIGH 8.11.3 %
CVE-2022-22514Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.HIGH 7.11.0 %
CVE-2022-22513Null Pointer Dereference in multiple CODESYS products can lead to a DoS.MEDIUM 6.51.2 %