Codesys Control Rte (sl) vulnerabilities

17 CVEs affecting Codesys Control Rte (sl), 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-47393, published 2023-05-15.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-47379, published 2023-05-15. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service…
• CVE-2022-47391, published 2023-05-15. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
• CVE-2022-47386, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47385, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47388, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47387, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47384, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47383, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47382, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47381, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a…

Latest

• CVE-2022-47393, published 2023-05-15. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a…
• CVE-2022-47392, published 2023-05-15. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an…
• CVE-2022-47390, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…
• CVE-2022-47389, published 2023-05-15. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack…