Codesys SP Realtime Nt vulnerabilities

2 CVEs affecting Codesys SP Realtime Nt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-31805, published 2022-06-24.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-19789, published 2019-12-20. Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days. 3S-Smart CODESYS SP Realtime NT before V2.3.7.28, CODESYS Runtime Toolkit 32 bit full before V2.4.7.54, and CODESYS PLCWinNT before V2.4.7.54 allow a NULL pointer dereference.
• CVE-2022-31805, published 2022-06-24. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.