CODESYS Embedded Target Visu Toolkit vulnerabilities
6 known vulnerabilities in CODESYS Embedded Target Visu Toolkit from Codesys. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
CODESYS Control RTE (SL): Uncontrolled Resource Consumption
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
- 7.5 High severity
CODESYS Control RTE (SL): Uncontrolled Resource Consumption
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
- 7.5 High severity
CODESYS Control RTE (SL): Out-of-bounds Read
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
- 7.5 High severity
CODESYS Control RTE (SL): Use of Insufficiently Random Values
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
- 8.1 High severity
CODESYS Control RTE (SL): Exposure of Resource to Wrong Sphere
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
- 7.1 High severity
CODESYS Control RTE (SL): Improper Restriction of Operations within the Bounds of a Memory Buffer
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor contr