CODESYS CODESYS HMI (SL)

• CVE-2026-8047 High 7.5 Out-of-bounds Write in CODESYS Control 0.4%
• CVE-2026-8046 High 8.1 Incorrect Authorization in CODESYS Control 0.3%
• CVE-2025-41660 High 8.8 CODESYS Control Boot Application Replacement Enables Code Execution 0.4%
• CVE-2025-41738 High 7.5 CODESYS Control - Invalid type usage in visualization 0.4%
• CVE-2024-8175 High 7.5 CODESYS: web server vulnerable to DoS 0.6%
• CVE-2023-5751 High 7.8 CODESYS: Development system prone to DoS through exposure of resource to wrong sphere 0.2%
• CVE-2024-5000 High 7.5 CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products 0.6%
• CVE-2022-4046 High 8.8 CODESYS: Improper memory restrictions fro CODESYS Control 0.9%
• CVE-2023-37559 Medium 6.5 CODESYS Improper Validation of Consistency within Input in multiple products 0.6%
• CVE-2023-37558 Medium 6.5 CODESYS Improper Validation of Consistency within Input in multiple products 0.6%
• CVE-2023-37557 Medium 6.5 CODESYS Heap-based Buffer Overflow in multiple products 0.6%
• CVE-2023-37556 Medium 6.5 CODESYS Improper Input Validation in CmpAppBP 0.6%
• CVE-2023-37555 Medium 6.5 CODESYS Improper Input Validation in CmpAppBP 0.6%
• CVE-2023-37554 Medium 6.5 CODESYS Improper Input Validation in CmpAppBP 0.6%
• CVE-2023-37553 Medium 6.5 CODESYS Improper Input Validation in CmpAppBP 0.6%
• CVE-2023-37552 Medium 6.5 CODESYS Improper Input Validation in CmpAppBP 0.6%
• CVE-2023-37551 Medium 6.5 CODESYS Files or Directories Accessible to External Parties in CmpApp 0.5%
• CVE-2023-37550 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2023-37549 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2023-37548 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2023-37547 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2023-37546 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2023-37545 Medium 6.5 CODESYS: Improper Input Validation in CmpApp component 0.6%
• CVE-2022-47393 Medium 6.5 CODESYS: Multiple products prone to improperly restricted memory operations 1.0%
• CVE-2022-47392 Medium 6.5 CODESYS: Multiple products prone to Improper Input Validation 0.9%
• CVE-2022-47391 High 7.5 CODESYS: Multiple products prone to Improper Input Validation 1.9%
• CVE-2022-47390 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47389 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47388 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47387 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47386 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.4%
• CVE-2022-47385 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.4%
• CVE-2022-47384 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47383 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47382 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47381 High 8.8 CODESYS: Multiple products prone to stack based out-of-bounds write 1.3%
• CVE-2022-47380 High 8.8 CODESYS: Multiple products prone to out-of-bounds write 1.3%
• CVE-2022-47379 High 8.8 CODESYS: Multiple products prone to out-of-bounds write 2.0%
• CVE-2022-47378 Medium 6.5 CODESYS: Multiple products prone to Improper Input Validation 0.9%
• CVE-2022-30792 High 7.5 CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels 0.9%
• CVE-2022-30791 High 7.5 CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections 0.9%
• CVE-2022-31805 High 7.5 Insecure transmission of credentials 1.0%
• CVE-2022-22519 High 7.5 Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system. 1.7%
• CVE-2022-22517 High 7.5 Communication Components in multiple CODESYS products vulnerable to communication channel disruption 1.5%
• CVE-2022-22515 High 8.1 A component of the CODESYS Control runtime system allows read and write access to configuration files 1.3%
• CVE-2022-22514 High 7.1 Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. 1.0%
• CVE-2022-22513 Medium 6.5 Null Pointer Dereference in multiple CODESYS products can lead to a DoS. 1.2%