Codesys Development System vulnerabilities

44 CVEs affecting Codesys Development System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-44469, published 2026-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-20025, published 2019-02-19. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.
CVE-2019-9010, published 2019-08-15. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication channel. All variants of the following CODESYS V3 products in…
CVE-2019-9012, published 2019-08-15. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the affected CODESYS products and may result in a…
CVE-2021-21864, published 2021-08-02. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. A unsafe deserialization vulnerability exists in the ComponentModel ComponentManager.StartupCultureSettings functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially…
CVE-2021-21866, published 2021-08-02. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. A unsafe deserialization vulnerability exists in the ObjectManager.plugin ProfileInformation.ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially…
CVE-2022-22519, published 2022-04-07. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
CVE-2021-29241, published 2021-05-03. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).
CVE-2022-22517, published 2022-04-07. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication…
CVE-2021-21865, published 2021-08-02. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. A unsafe deserialization vulnerability exists in the PackageManagement.plugin ExtensionMethods.Clone() functionality of CODESYS GmbH CODESYS Development System 3.5.16. A specially crafted file can…
CVE-2021-21863, published 2021-08-05. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. A unsafe deserialization vulnerability exists in the ComponentModel Profile.FromFile() functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to…

Latest

CVE-2026-44469, published 2026-05-26. High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days. The affected product extracts installation files to a temporary directory with incorrect default permissions during administrative installation. A low-privileged local attacker can exploit a TOCTOU…
CVE-2026-44468, published 2026-05-26. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. The affected product creates a directory with insecure default permissions during administrative installation. This allows a low-privileged local attacker to modify a temporary file defining the…
CVE-2023-49675, published 2024-05-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write vulnerability.
CVE-2023-3669, published 2023-08-03. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialog.
CVE-2023-37559, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce…
CVE-2023-37558, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the CmpAppForce…
CVE-2023-37557, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to overwrite a heap-based…
CVE-2023-37556, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP…
CVE-2023-37555, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP…
CVE-2023-37554, published 2023-08-03. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause the CmpAppBP…