CVE search

401,051 vulnerabilities · 1,766 actively exploited (CISA KEV)

17 results

ID	Severity	Summary	Published
CVE-2022-32143	高危8.8	In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files of the PLC. All requests are processed on the controller only if no level 1 password is configured on the controller or if remote attacker has previously successfully authenticate	24/06/2022
CVE-2022-32142	高危8.1	Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. Use	24/06/2022
CVE-2022-32141	中危6.5	Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.