Known Vulnerabilities for Runtime Toolkit by Codesys
Listed below are 10 of the newest known vulnerabilities associated with "Runtime Toolkit" by "Codesys".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-32143 json | In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g.... | 8.8 - HIGH | 2022-06-24 | 2022-07-01 |
| CVE-2022-32142 json | Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a req... | 8.1 - HIGH | 2022-06-24 | 2022-07-01 |
| CVE-2022-32141 json | Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an inval... | 6.5 - MEDIUM | 2022-06-24 | 2023-06-29 |
| CVE-2022-32140 json | Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can c... | 6.5 - MEDIUM | 2022-06-24 | 2022-07-01 |
| CVE-2022-32139 json | In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, result... | 6.5 - MEDIUM | 2022-06-24 | 2022-07-01 |
| CVE-2022-32138 json | In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting i... | 8.8 - HIGH | 2022-06-24 | 2022-07-01 |
| CVE-2022-32137 json | In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overf... | 8.8 - HIGH | 2022-06-24 | 2022-07-01 |
| CVE-2022-32136 json | In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitializ... | 6.5 - MEDIUM | 2022-06-24 | 2022-07-01 |
| CVE-2022-31806 json | In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default an... | 9.8 - CRITICAL | 2022-06-24 | 2022-07-07 |
| CVE-2022-31805 json | In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication betwe... | 7.5 - HIGH | 2022-06-24 | 2023-05-09 |