Input Validation and Logic

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

1. CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-serviceCVE-2021-34593CODESYS · CVSS 7.5 · 2.7% likely

   CWE-755

2. An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.CVE-2019-9009Codesys · 1.9% likely

   CWE-755

3. CODESYS: Multiple products prone to Improper Input ValidationCVE-2022-47391CODESYS · CVSS 7.5 · 1.9% likely

   CWE-20

4. Partial string comparison in CODESYS gateway serverCVE-2022-31802CODESYS · CVSS 9.8 · 1.4% likely

   CWE-187

5. CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-…CVE-2021-29242Codesys · 1.3% likely

   CWE-20

6. CODESYS runtime system prone to file deletion due to improper error handlingCVE-2022-1965CODESYS · CVSS 8.1 · 1.1% likely

   CWE-755

7. All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.CVE-2021-33486Codesys · 1.0% likely

   CWE-755

8. CODESYS: Multiple products prone to Improper Input ValidationCVE-2022-47378CODESYS · CVSS 6.5 · 0.9% likely

   CWE-20

9. CODESYS V2 web server: crafted requests could trigger a pointer dereference with an invalid address (DoS)CVE-2021-34585CODESYS · CVSS 7.5 · 0.9% likely

   CWE-252

10. CODESYS: Multiple products prone to Improper Input ValidationCVE-2022-47392CODESYS · CVSS 6.5 · 0.9% likely

    CWE-20

11. CODESYS Improper Validation of Consistency within Input in multiple productsCVE-2023-37559CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

12. CODESYS Improper Validation of Consistency within Input in multiple productsCVE-2023-37558CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

13. CODESYS Improper Input Validation in CmpAppBPCVE-2023-37556CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

14. CODESYS Improper Input Validation in CmpAppBPCVE-2023-37555CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

15. CODESYS Improper Input Validation in CmpAppBPCVE-2023-37554CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

16. CODESYS Improper Input Validation in CmpAppBPCVE-2023-37553CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

17. CODESYS Improper Input Validation in CmpAppBPCVE-2023-37552CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

18. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37550CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

19. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37549CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

20. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37548CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

21. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37547CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

22. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37546CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

23. CODESYS: Improper Input Validation in CmpApp componentCVE-2023-37545CODESYS · CVSS 6.5 · 0.6% likely

    CWE-20

24. CODESYS: web server vulnerable to DoSCVE-2024-8175CODESYS · CVSS 7.5 · 0.6% likely

    CWE-754

25. Out-of-bounds Write in CODESYS ControlCVE-2026-8047CODESYS · CVSS 7.5 · 0.4% likely

    CWE-1284

26. Improper timeout handling in CODESYS EtherNetIPCVE-2026-35225CODESYS · CVSS 8.7 · 0.4% likely

    CWE-754

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.