Codesys: >> Control For Linux Sl >> 4.10.0.0 Security Vulnerabilities
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-12-01
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the device.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-12-05
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
CVSS Score
8.8
EPSS Score
0.008
Published
2023-08-03