CVE-2021-36764: Codesys Gateway

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.

Affected products

• Codesys Gateway: from 3.0, before 3.5.17.10 (fixed in 3.5.17.10)

Published 2021-08-04. Last modified 2026-06-17.