CODESYS CODESYS Control for emPC-A/iMX6 SL
50 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-8047 | | Out-of-bounds Write in CODESYS Control | HIGH 8.7 | 0.4 % | ||
| CVE-2026-8046 | | Incorrect Authorization in CODESYS Control | HIGH 7.2 | 0.3 % | ||
| CVE-2026-3509 | | CODESYS Control Audit Log Format String DoS | HIGH 7.5 | 0.4 % | ||
| CVE-2025-41660 | | CODESYS Control Boot Application Replacement Enables Code Execution | HIGH 8.8 | 0.4 % | ||
| CVE-2025-41738 | | CODESYS Control - Invalid type usage in visualization | HIGH 7.5 | 0.4 % | ||
| CVE-2025-41739 | 4.15.0.0 – < 4.19.0.0 | CODESYS Control - Linux/QNX SysSocket flaw | MEDIUM 5.9 | 0.4 % | ||
| CVE-2025-0694 | < 4.16.0.0 | CODESYS Control V3 removable media path traversal | MEDIUM 6.6 | 0.3 % | ||
| CVE-2024-8175 | < 4.14.0.0 | CODESYS: web server vulnerable to DoS | HIGH 7.5 | 0.6 % | ||
| CVE-2024-5000 | < 4.12.0.0 | CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products | HIGH 7.5 | 0.6 % | ||
| CVE-2023-6357 | < 4.11.0.0 | OS Command Injection in multiple CODESYS products | HIGH 8.8 | 1.0 % | ||
| CVE-2022-4046 | all | CODESYS: Improper memory restrictions fro CODESYS Control | HIGH 8.8 | 0.9 % | ||
| CVE-2023-37559 | < V4.10.0.0 | CODESYS Improper Validation of Consistency within Input in multiple products | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37558 | < V4.10.0.0 | CODESYS Improper Validation of Consistency within Input in multiple products | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37557 | < V4.10.0.0 | CODESYS Heap-based Buffer Overflow in multiple products | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37556 | < V4.10.0.0 | CODESYS Improper Input Validation in CmpAppBP | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37555 | < V4.10.0.0 | CODESYS Improper Input Validation in CmpAppBP | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37554 | < V4.10.0.0 | CODESYS Improper Input Validation in CmpAppBP | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37553 | < V4.10.0.0 | CODESYS Improper Input Validation in CmpAppBP | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37552 | < V4.10.0.0 | CODESYS Improper Input Validation in CmpAppBP | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37551 | < V4.10.0.0 | CODESYS Files or Directories Accessible to External Parties in CmpApp | MEDIUM 6.5 | 0.5 % | ||
| CVE-2023-37550 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37549 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37548 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37547 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37546 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2023-37545 | < V4.10.0.0 | CODESYS: Improper Input Validation in CmpApp component | MEDIUM 6.5 | 0.6 % | ||
| CVE-2022-47393 | | CODESYS: Multiple products prone to improperly restricted memory operations | MEDIUM 6.5 | 1.0 % | ||
| CVE-2022-47392 | | CODESYS: Multiple products prone to Improper Input Validation | MEDIUM 6.5 | 0.9 % | ||
| CVE-2022-47391 | | CODESYS: Multiple products prone to Improper Input Validation | HIGH 7.5 | 1.9 % | ||
| CVE-2022-47390 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47389 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47388 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47387 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47386 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.4 % | ||
| CVE-2022-47385 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.4 % | ||
| CVE-2022-47384 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47383 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47382 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47381 | | CODESYS: Multiple products prone to stack based out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47380 | | CODESYS: Multiple products prone to out-of-bounds write | HIGH 8.8 | 1.3 % | ||
| CVE-2022-47379 | | CODESYS: Multiple products prone to out-of-bounds write | HIGH 8.8 | 2.0 % | ||
| CVE-2022-47378 | | CODESYS: Multiple products prone to Improper Input Validation | MEDIUM 6.5 | 0.9 % | ||
| CVE-2022-30792 | | CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels | HIGH 7.5 | 0.9 % | ||
| CVE-2022-30791 | | CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections | HIGH 7.5 | 0.9 % | ||
| CVE-2022-22519 | | Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system. | HIGH 7.5 | 1.7 % | ||
| CVE-2022-22518 | V4.5.0.0 – < V4.5.0.0 | A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy. | MEDIUM 6.5 | 0.6 % | ||
| CVE-2022-22517 | | Communication Components in multiple CODESYS products vulnerable to communication channel disruption | HIGH 7.5 | 1.5 % | ||
| CVE-2022-22515 | | A component of the CODESYS Control runtime system allows read and write access to configuration files | HIGH 8.1 | 1.3 % | ||
| CVE-2022-22514 | | Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. | HIGH 7.1 | 1.0 % | ||
| CVE-2022-22513 | | Null Pointer Dereference in multiple CODESYS products can lead to a DoS. | MEDIUM 6.5 | 1.2 % |