Codesys Simulation Runtime — known CVE vulnerabilities

Every CVE whose affected-product data names Codesys Simulation Runtime, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2018-25048 — CVSS 8.8 (high): The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access…
• CVE-2019-9008 — CVSS 8.8 (high): An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.
• CVE-2019-9009 — CVSS 7.5 (high): An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.
• CVE-2020-15806 — CVSS 7.5 (high): CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.
• CVE-2021-29242 — CVSS 7.3 (high): CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change…
• CVE-2020-7052 — CVSS 6.5 (medium): CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of…