File and Path Handling

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted…CVE-2019-13532Codesys · 3.5% likely

   CWE-22

2. An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server. The following versions of CODESYS Web Server, part of the CODESYS WebVisu web…CVE-2017-6027Codesys · 2.6% likely

   CWE-434

3. CODESYS runtime system prone to directory accesCVE-2022-32143CODESYS · CVSS 8.8 · 1.2% likely

   CWE-552

4. In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.CVE-2021-36763Codesys · 1.2% likely

   CWE-552

5. Codesys Runtime Improper Limitation of a PathnameCVE-2018-25048CODESYS · CVSS 8.8 · 1.0% likely

   CWE-22

6. CODESYS Files or Directories Accessible to External Parties in CmpAppCVE-2023-37551CODESYS · CVSS 6.5 · 0.5% likely

   CWE-552

7. CODESYS Control V3 removable media path traversalCVE-2025-0694CODESYS · CVSS 6.6 · 0.3% likely

   CWE-22

8. CODESYS: Vulnerability in CODESYS Development System allows for execution of binariesCVE-2023-3662CODESYS · CVSS 7.3 · 0.2% likely

   CWE-427

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.