CVE-2021-29240: Codesys Development System

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.

Affected products

• Codesys Development System: from 3.0, before 3.5.17.0 (fixed in 3.5.17.0)

Published 2021-05-04. Last modified 2026-06-17.