Vulnerabilidades em CODESYS

102 resultados
Análise Vexday

Com 101 CVEs catalogadas e nenhuma até o momento confirmada em exploração ativa pelo catálogo KEV da CISA, o CODESYS apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere menor pressão imediata de ataques oportunistas, embora não elimine o risco inerente a ambientes de automação industrial. A falha mais prevalente é CWE-20 (validação inadequada de entrada), padrão que historicamente favorece explorações remotas em sistemas de controle. O maior EPSS observado no portfólio é 0,1308, registrado em CVE-2021-34586, indicando probabilidade moderada de exploração dessa vulnerabilidade em curto prazo e merecendo atenção prioritária em ambientes que ainda não aplicaram as correções correspondentes. As 7 CVEs surgidas nos últimos 90 dias sinalizam ritmo contínuo de descobertas, reforçando a necessidade de monitoramento regular do ciclo de patching em implementações do runtime CODESYS.

CVE-2021-34586HIGHCODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS)EPSS 13.1%CVE-2021-34583HIGHCODESYS V2 web server: crafted requests could trigger a heap-based buffer overflow (DoS)EPSS 8.4%CVE-2015-6460—Multiple heap-based buffer overflows in 3S-Smart CODESYS Gateway Server before 2.3.9.34 allow remote attackers to execute arbitrary code viaEPSS 6.2%CVE-2021-34593HIGHCODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-serviceEPSS 2.6%CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2022-47391HIGHCODESYS: Multiple products prone to Improper Input ValidationEPSS 1.9%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47387HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47382HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47384HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47381HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47380HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 1.3%CVE-2022-47388HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47383HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47389HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-47390HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.3%CVE-2022-32137HIGHCODESYS Runtime System prone to heap based buffer overflowEPSS 1.3%CVE-2022-22517HIGHCommunication Components in multiple CODESYS products vulnerable to communication channel disruptionEPSS 1.3%