What’s Vulnerable › Products

CODESYS Development System vulnerabilities

44 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your CODESYS Development System version is affected

Latest CODESYS Development System vulnerabilities

• CVE-2026-44469 — Incorrect Default Permissions in CODESYS Development System (CVSS 7.0)
• CVE-2026-44468 — Incorrect Default Permissions in CODESYS Development System (CVSS 7.8)
• CVE-2023-49675 — CODESYS: Out-of-bounds write through corrupted project files (CVSS 7.8)
• CVE-2023-3669 — CODESYS: Missing Brute-Force protection in CODESYS Development System (CVSS 3.3)
• CVE-2023-37559 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
• CVE-2023-37558 — CODESYS Improper Validation of Consistency within Input in multiple products (CVSS 6.5)
• CVE-2023-37557 — CODESYS Heap-based Buffer Overflow in multiple products (CVSS 6.5)
• CVE-2023-37556 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37555 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37554 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37553 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37552 — CODESYS Improper Input Validation in CmpAppBP (CVSS 6.5)
• CVE-2023-37551 — CODESYS Files or Directories Accessible to External Parties in CmpApp (CVSS 6.5)
• CVE-2023-37550 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37549 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37548 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37547 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-37546 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-3663 — CODESYS: Missing integrity check in CODESYS Development System (CVSS 8.8)
• CVE-2023-37545 — CODESYS: Improper Input Validation in CmpApp component (CVSS 6.5)
• CVE-2023-3662 — CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries (CVSS 7.3)
• CVE-2023-3670 — Codesys: Vulnerability in CODESYS Development System and CODESYS Scripting (CVSS 7.3)
• CVE-2022-4224 — CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 (CVSS 8.8)
• CVE-2022-30792 — CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels (CVSS 5.0)
• CVE-2022-30791 — CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections (CVSS 5.0)