📦 Development System

by Codesys

🔍 What is Development System?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2023-3662

HIGH CVSS 7.3 Aug 3, 2023

This vulnerability in CODESYS Development System allows attackers to execute arbitrary binaries from the current working directory with the user's privileges. It affects users running vulnerable versi...

CVE-2023-3670

HIGH CVSS 7.3 Jul 28, 2023

CVE-2023-3670 is a local privilege escalation vulnerability in CODESYS Development System and CODESYS Scripting where insecure directory permissions allow attackers with local workstation access to pl...

CVE-2022-30792

HIGH CVSS 7.5 Jul 11, 2022

CVE-2022-30792 is a denial-of-service vulnerability in CODESYS V3's CmpChannelServer component that allows unauthorized attackers to consume resources and block new communication channel connections. ...

CVE-2022-22514

HIGH CVSS 7.1 Apr 7, 2022

CVE-2022-22514 is a memory corruption vulnerability in CODESYS Control runtime systems that allows authenticated remote attackers to cause denial of service through system crashes. Attackers can deref...

CVE-2022-22516

HIGH CVSS 7.8 Apr 7, 2022

The SysDrv3S driver in CODESYS Control runtime system on Windows allows any system user to read and write restricted memory space. This vulnerability affects all Windows systems running vulnerable ver...

CVE-2022-22519

HIGH CVSS 7.5 Apr 7, 2022

CVE-2022-22519 is a buffer over-read vulnerability in CODESYS Control runtime system webserver that allows remote, unauthenticated attackers to crash the webserver by sending crafted HTTP/HTTPS reques...

CVE-2021-21863

HIGH CVSS 7.8 Aug 5, 2021

This CVE describes an unsafe deserialization vulnerability in CODESYS Development System's Profile.FromFile() function. Attackers can craft malicious files to trigger arbitrary command execution on af...

CVE-2021-21865

HIGH CVSS 7.8 Aug 2, 2021

This CVE-2021-21865 is an unsafe deserialization vulnerability in CODESYS Development System that allows arbitrary command execution when processing malicious files. Attackers can exploit this by prov...

CVE-2021-29240

HIGH CVSS 7.8 May 4, 2021

This vulnerability in CODESYS Development System 3 allows attackers to install malicious packages without validation checks. It affects users of CODESYS Development System 3 before version 3.5.17.0 wh...

CVE-2021-29239

HIGH CVSS 7.8 May 3, 2021

CVE-2021-29239 is a vulnerability in CODESYS Development System 3 where malicious documents or files embedded in libraries are displayed or executed without proper validation checks. This allows attac...