CF
Product
Control for PLCnext SL
by CODESYS · last CVE Sep 30, 2026
47
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 26Medium 21Low 0
Watch

Add Control for PLCnext SL to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-37559
6.5
1%
Aug 3
CODESYS Improper Validation of Consistency within Input in multiple products
Affected: before 4.10.0.0
CVE-2023-37558
6.5
1%
Aug 3
CODESYS Improper Validation of Consistency within Input in multiple products
Affected: before 4.10.0.0
CVE-2023-37557
6.5
1%
Aug 3
CODESYS Heap-based Buffer Overflow in multiple products
Affected: before 4.10.0.0
CVE-2023-37556
6.5
1%
Aug 3
CODESYS Improper Input Validation in CmpAppBP
Affected: before 4.10.0.0
CVE-2023-37555
6.5
1%
Aug 3
CODESYS Improper Input Validation in CmpAppBP
Affected: before 4.10.0.0
CVE-2023-37554
6.5
1%
Aug 3
CODESYS Improper Input Validation in CmpAppBP
Affected: before 4.10.0.0
CVE-2023-37553
6.5
1%
Aug 3
CODESYS Improper Input Validation in CmpAppBP
Affected: before 4.10.0.0
CVE-2023-37552
6.5
1%
Aug 3
CODESYS Improper Input Validation in CmpAppBP
Affected: before 4.10.0.0
CVE-2023-37551
6.5
0%
Aug 3
CODESYS Files or Directories Accessible to External Parties in CmpApp
Affected: before 4.10.0.0
CVE-2023-37550
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2023-37549
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2023-37548
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2023-37547
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2023-37546
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2023-37545
6.5
1%
Aug 3
CODESYS: Improper Input Validation in CmpApp component
Affected: before 4.10.0.0
CVE-2022-47393
6.5
1%
May 15
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products…
Affected: before 4.8.0.0
CVE-2022-47392
6.5
1%
May 15
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions…
Affected: before 4.8.0.0
CVE-2022-47378
6.5
1%
May 15
Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability
Affected: before 4.8.0.0
CVE-2022-22513
6.5
1%
Apr 7
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash
Affected: before 4.5.0.0
CVE-2025-41658
5.5
0%
Aug 4
CODESYS Toolkit Exposes Sensitive Files via Default Permissions
Affected: 0.0.0.0 before 4.16.0.0
CVE-2022-22508
4.3
1%
May 15
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type
Affected: before 4.7.0.0
Showing 21