Advisories

For CVSS 2.0, 3.0 and 3.2
VDE-2023-021
Aug. 3, 2023, 12:48 PM
The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.
VDE-2023-019
Aug. 3, 2023, 12:42 PM
CODESYS Control V3 runtime systems are affected by several security vulnerabilities in the communication server implementations for the CODESYS protocol. These may be exploited by authenticated attackers.
VDE-2023-024
July 28, 2023, 9:45 AM
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful …