| Package | Affected versions | Patched versions |
|---|---|---|
| control for beaglebone | < 3.5.14.10 | 3.5.14.10 |
| control for empc-a/imx6 | < 3.5.14.10 | 3.5.14.10 |
| control for iot2000 | < 3.5.14.10 | 3.5.14.10 |
| control for linux | < 3.5.14.10 | 3.5.14.10 |
| control for pfc100 | < 3.5.14.10 | 3.5.14.10 |
| control for pfc200 | < 3.5.14.10 | 3.5.14.10 |
| control for raspberry pi | < 3.5.14.10 | 3.5.14.10 |
| control rte | ≥ 3.5.13.0, < 3.5.14.10≥ 3.5.8.60, < 3.5.12.80 | 3.5.14.103.5.12.80 |
| control runtime system toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
| control win | ≥ 3.5.13.0, < 3.5.14.10≥ 3.5.9.80, ≤ 3.5.12.80 | 3.5.14.10 |
| embedded target visu toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
| hmi | ≥ 3.5.10.0, < 3.5.12.80≥ 3.5.13.0, < 3.5.14.10 | 3.5.12.803.5.14.10 |
| remote target visu toolkit | ≥ 3.0, < 3.5.12.80 | 3.5.12.80 |
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which could cause a stack overflow and create a denial-of-service condition or allow remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free