Skip to content

CODESYS · weakness class

Denial of Service

9 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.CVE-2020-15806Codesys · 2.5% likely

    CWE-401

  2. CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.CVE-2020-7052Codesys · 2.3% likely

    CWE-770

  3. An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result…CVE-2019-9012Codesys · 1.9% likely

    CWE-770

  4. CODESYS Gateway server prone to denial of service attack due to excessive memory allocationCVE-2022-31804CODESYS · CVSS 7.5 · 1.2% likely

    CWE-789

  5. CODESYS Gateway Server V2 prone to Denial of Service AttackCVE-2022-31803CODESYS · CVSS 5.3 · 1.2% likely

    CWE-400

  6. CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channelsCVE-2022-30792CODESYS · CVSS 7.5 · 0.9% likely

    CWE-400

  7. CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connectionsCVE-2022-30791CODESYS · CVSS 7.5 · 0.9% likely

    CWE-400

  8. Improper resource management in CODESYS Modbus TCP ServerCVE-2026-35227CODESYS · CVSS 8.2 · 0.4% likely

    CWE-772

  9. Uncontrolled Memory Allocation in CODESYS Gateway ClientCVE-2026-76992CODESYS · CVSS 7.5 · 0.3% likely

    CWE-770

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.