Skip to content

CODESYS · product

Runtime Toolkit

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. CODESYS Runtime System prone to heap based buffer overflowCVE-2022-32137CODESYS · CVSS 8.8 · 1.4% likely

    CWE-122

  2. CODESYS runtime system prone to directory accesCVE-2022-32143CODESYS · CVSS 8.8 · 1.2% likely

    CWE-552

  3. CODESYS runtime system prone to denial of service due to Unexpected Sign ExtensionCVE-2022-32138CODESYS · CVSS 8.8 · 1.2% likely

    CWE-194

  4. CODESYS runtime system prone to denial of service due to use of out of range pointerCVE-2022-32142CODESYS · CVSS 8.1 · 1.1% likely

    CWE-823

  5. CODESYS runtime system prone to file deletion due to improper error handlingCVE-2022-1965CODESYS · CVSS 8.1 · 1.1% likely

    CWE-755

  6. CODESYS runtime system prone to denial of service due to buffer copyCVE-2022-32140CODESYS · CVSS 6.5 · 1.1% likely

    CWE-120

  7. CODESYS runtime system prone to denial of service due to buffer over readCVE-2022-32141CODESYS · CVSS 6.5 · 1.1% likely

    CWE-126

  8. CODESYS runtime system prone to denial of service due to out of bounds readCVE-2022-32139CODESYS · CVSS 6.5 · 1.1% likely

    CWE-125

  9. Codesys runtime systems: Access of uninitialised pointer lead to denial of service.CVE-2022-32136CODESYS · CVSS 6.5 · 1.1% likely

    CWE-824

  10. All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.CVE-2021-33486Codesys · 1.0% likely

    CWE-755

  11. CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.CVE-2021-30187Codesys · 0.3% likely

    CWE-78

  12. CODESYS Toolkit Exposes Sensitive Files via Default PermissionsCVE-2025-41658CODESYS · CVSS 5.5 · 0.1% likely

    CWE-276

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.