CF
Product
Control for IOT2000 SL
57
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 33Medium 22Low 0
Watch
Add Control for IOT2000 SL to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47393 | 6.5 | May 15 | An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products… Affected: before 4.8.0.0 |
| CVE-2022-47392 | 6.5 | May 15 | An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions… Affected: before 4.8.0.0 |
| CVE-2022-47378 | 6.5 | May 15 | Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability Affected: before 4.8.0.0 |
| CVE-2022-22518 | 6.5 | Apr 7 | A bug in CmpUserMgr component can lead to only partially applied security policies Affected: 4.4.0.0 before 4.5.0.0 |
| CVE-2022-22513 | 6.5 | Apr 7 | An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash Affected: before 4.5.0.0 |
| CVE-2025-41658 | 5.5 | Aug 4 | CODESYS Toolkit Exposes Sensitive Files via Default Permissions Affected: 0.0.0.0 before 4.16.0.0 |
| CVE-2022-22508 | 4.3 | May 15 | Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type Affected: before 4.7.0.0 |