What’s Vulnerable › Products

CODESYS Control Win (SL) vulnerabilities

34 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your CODESYS Control Win (SL) version is affected

Latest CODESYS Control Win (SL) vulnerabilities

• CVE-2026-79625 — Improper Synchronization in Monitoring in CODESYS Control Runtime (CVSS 8.1)
• CVE-2025-41738 — CODESYS Control - Invalid type usage in visualization (CVSS 7.5)
• CVE-2025-41691 — CODESYS Control DoS via Unauthenticated NULL Pointer Dereference (CVSS 7.5)
• CVE-2025-41659 — CODESYS Control PKI Exposure Enables Remote Certificate Access (CVSS 8.3)
• CVE-2023-5751 — CODESYS: Development system prone to DoS through exposure of resource to wrong sphere (CVSS 7.8)
• CVE-2022-4046 — CODESYS: Improper memory restrictions fro CODESYS Control (CVSS 8.8)
• CVE-2023-37559 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
• CVE-2023-37558 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
• CVE-2023-37557 — CODESYS Heap-based Buffer Overflow in multiple products (CVSS 6.5)
• CVE-2023-37556 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37555 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37554 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37553 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37552 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37551 — CODESYS Files or Directories Accessible to External Parties in CmpApp (CVSS 6.5)
• CVE-2023-37550 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37549 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37548 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37547 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37546 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37545 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2022-4224 — CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 (CVSS 8.8)
• CVE-2022-22519 — Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system. (CVSS 7.5)
• CVE-2022-22517 — Communication Components in multiple CODESYS products vulnerable to communication channel disruption (CVSS 7.5)
• CVE-2022-22516 — CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space. (CVSS 7.8)