Total vulnerabilities in the database
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
| Software | From | Fixed in |
|---|---|---|
| codesys / control_rte | 3.5.8.60 | 3.5.12.80 |
| codesys / control_for_beaglebone | - | 3.5.14.10 |
| codesys / control_for_empc-a/imx6 | - | 3.5.14.10 |
| codesys / control_for_iot2000 | - | 3.5.14.10 |
| codesys / control_for_linux | - | 3.5.14.10 |
| codesys / control_for_pfc100 | - | 3.5.14.10 |
| codesys / control_for_pfc200 | - | 3.5.14.10 |
| codesys / control_for_raspberry_pi | - | 3.5.14.10 |
| codesys / control_rte | 3.5.13.0 | 3.5.14.10 |
| codesys / control_win | 3.5.9.80 | 3.5.12.80.x |
| codesys / control_win | 3.5.13.0 | 3.5.14.10 |
| codesys / hmi | 3.5.10.0 | 3.5.12.80 |
| codesys / hmi | 3.5.13.0 | 3.5.14.10 |
| codesys / control_runtime_system_toolkit | 3.0 | 3.5.12.80 |
| codesys / embedded_target_visu_toolkit | 3.0 | 3.5.12.80 |
| codesys / remote_target_visu_toolkit | 3.0 | 3.5.12.80 |