What’s Vulnerable › Products
CODESYS Control RTE (SL) vulnerabilities
34 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your CODESYS Control RTE (SL) version is affected
Latest CODESYS Control RTE (SL) vulnerabilities
- CVE-2026-79625 — Improper Synchronization in Monitoring in CODESYS Control Runtime (CVSS 8.1)
- CVE-2025-41738 — CODESYS Control - Invalid type usage in visualization (CVSS 7.5)
- CVE-2025-41691 — CODESYS Control DoS via Unauthenticated NULL Pointer Dereference (CVSS 7.5)
- CVE-2025-41659 — CODESYS Control PKI Exposure Enables Remote Certificate Access (CVSS 8.3)
- CVE-2024-8175 — CODESYS: web server vulnerable to DoS (CVSS 7.5)
- CVE-2022-4046 — CODESYS: Improper memory restrictions fro CODESYS Control (CVSS 8.8)
- CVE-2023-37559 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
- CVE-2023-37558 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
- CVE-2023-37557 — CODESYS Heap-based Buffer Overflow in multiple products (CVSS 6.5)
- CVE-2023-37556 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
- CVE-2023-37555 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
- CVE-2023-37554 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
- CVE-2023-37553 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
- CVE-2023-37552 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
- CVE-2023-37551 — CODESYS Files or Directories Accessible to External Parties in CmpApp (CVSS 6.5)
- CVE-2023-37550 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2023-37549 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2023-37548 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2023-37547 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2023-37546 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2023-37545 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
- CVE-2022-4224 — CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 (CVSS 8.8)
- CVE-2022-30792 — CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels (CVSS 5.0)
- CVE-2022-30791 — CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections (CVSS 5.0)
- CVE-2022-22519 — Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system. (CVSS 7.5)