Codesys: >> Runtime Toolkit >> 3.5.18.0 Security Vulnerabilities
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-12-01
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-12-05
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
CVSS Score
8.8
EPSS Score
0.008
Published
2023-03-23