Codesys / Hmi SL

14 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-41738	CODESYS Control - Invalid type usage in visualization	HIGH	7.5	Dec 1, 2025
CVE-2023-5751	CODESYS: Development system prone to DoS through exposure of resource to wrong sphere	HIGH	7.8	Jun 4, 2024
CVE-2022-4046	CODESYS: Improper memory restrictions fro CODESYS Control	HIGH	8.8	Aug 3, 2023
CVE-2022-4224	CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3	HIGH	8.8	Mar 23, 2023
CVE-2022-31805	Insecure transmission of credentials	HIGH	7.5	Jun 24, 2022
CVE-2022-22519	Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.	HIGH	7.5	Apr 7, 2022
CVE-2022-22517	Communication Components in multiple CODESYS products vulnerable to communication channel disruption	HIGH	7.5	Apr 7, 2022
CVE-2022-22515	A component of the CODESYS Control runtime system allows read and write access to configuration files	HIGH	8.1	Apr 7, 2022
CVE-2022-22514	Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.	HIGH	7.1	Apr 7, 2022
CVE-2022-22513	Null Pointer Dereference in multiple CODESYS products can lead to a DoS.	MEDIUM	6.5	Apr 7, 2022
CVE-2019-9013	An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insuffic…	HIGH	8.8	Aug 15, 2019
CVE-2018-20026	Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.	HIGH	7.5	Feb 19, 2019
CVE-2018-20025	Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.	HIGH	7.5	Feb 19, 2019
CVE-2018-10612	In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled b…	CRITICAL	9.8	Jan 29, 2019

Rows per page

Showing 1 to 14 of 14 CVEs