Codesys v2 Web Server vulnerabilities

6 CVEs affecting Codesys v2 Web Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-30194, published 2021-05-25.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-30190, published 2021-05-25. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has Improper Access Control.
• CVE-2021-30189, published 2021-05-25. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.
• CVE-2021-30193, published 2021-05-25. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Write.
• CVE-2021-30192, published 2021-05-25. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has an Improperly Implemented Security Check.
• CVE-2021-30194, published 2021-05-25. Critical severity, CVSS 9.1. EPSS: 1.2% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has an Out-of-bounds Read.
• CVE-2021-30191, published 2021-05-25. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. CODESYS V2 Web-Server before 1.1.9.20 has a a Buffer Copy without Checking the Size of the Input.