CODESYS · weakness class
Memory Corruption
59 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 1
Every one of the 59 is a mark on the map. Named now: 1 to 26, most at risk first.
- CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)
- CODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)
- CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.
- CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation.
- Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code via opcode (1) 0x3ef or (2) 0x3f0.
- CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-…
- CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.
- An exploitable memory corruption vulnerability exists in the Name Service Client functionality of 3S-Smart Software Solutions CODESYS GatewayService. A specially crafted packet ca…
- CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.
- A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web…
- CODESYS: Multiple products prone to out-of-bounds write
- CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
- Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
- CODESYS V2.3 ENI server up to V3.2.2.24 has a Buffer Overflow.
- 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a…
- CODESYS Runtime System prone to heap based buffer overflow
- CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to stack based out-of-bounds write
- CODESYS: Multiple products prone to out-of-bounds write
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.