RT
Product
Runtime Toolkit
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 19Medium 8Low 0
Watch
Add Runtime Toolkit to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6357 | 8.8 | Dec 5 | OS Command Injection in multiple CODESYS products Affected: before 3.5.19.50 |
| CVE-2022-4224 | 8.8 | Mar 23 | CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 Affected: 3.0.0.0 before 3.5.19.0 |
| CVE-2022-32143 | 8.8 | Jun 24 | CODESYS runtime system prone to directory acces Affected: V2 before V2.4.7.57 |
| CVE-2022-32138 | 8.8 | Jun 24 | CODESYS runtime system prone to denial of service due to Unexpected Sign Extension Affected: V2 before V2.4.7.57 |
| CVE-2022-32137 | 8.8 | Jun 24 | CODESYS Runtime System prone to heap based buffer overflow Affected: V2 before V2.4.7.57 |
| CVE-2019-9013 | 8.8 | Aug 15 | An issue was discovered in 3S-Smart CODESYS V3 products Affected: 3.0 before 3.5.16.0 |
| CVE-2025-41659 | 8.3 | Aug 4 | CODESYS Control PKI Exposure Enables Remote Certificate Access Affected: 0.0.0.0 before 3.5.21.20 |
| CVE-2026-79625 | 8.1 | Sep 30 | Improper Synchronization in Monitoring in CODESYS Control Runtime Affected: 3.0.0.0 before 3.5.22.40 |
| CVE-2022-32142 | 8.1 | Jun 24 | CODESYS runtime system prone to denial of service due to use of out of range pointer Affected: V2 before V2.4.7.57 |
| CVE-2022-1965 | 8.1 | Jun 24 | CODESYS runtime system prone to file deletion due to improper error handling Affected: V2 before V2.4.7.57 |
| CVE-2021-34595 | 8.1 | Oct 26 | CODESYS V2 runtime: out-of-bounds read or write access may result in denial-of-service Affected: before 2.4.7.56 |
| CVE-2026-76992 | 7.5 | Sep 30 | Uncontrolled Memory Allocation in CODESYS Gateway Client Affected: 3.0.0.0 before 3.5.22.40 |
| CVE-2025-41738 | 7.5 | Dec 1 | CODESYS Control - Invalid type usage in visualization Affected: 3.5.18.0 before 3.5.21.40 |
| CVE-2024-5000 | 7.5 | Jun 4 | CODESYS: Incorrect calculation of buffer size can cause DoS on CODESYS OPC UA products Affected: before 3.5.20.10 |
| CVE-2022-31805 | 7.5 | Jun 24 | Insecure transmission of credentials Affected: before 2.4.7.57 |
| CVE-2021-34593 | 7.5 | Oct 26 | CODESYS V2 runtime: unauthenticated invalid requests may result in denial-of-service Affected: before 2.4.7.56 |
| CVE-2021-33486 | 7.5 | Aug 3 | All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions Affected: 3.5.8.0 before 3.5.17.10 |
| CVE-2021-30195 | 7.5 | May 25 | CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation Affected: before 2.4.7.55 |
| CVE-2021-30186 | 7.5 | May 25 | CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow Affected: before 2.4.7.55 |
Showing 19