CODESYS codesys hmi sl güvenlik açıkları (CVE)

CODESYS codesys hmi sl için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

5 sonuç
7.5Yüksek
CVE-2026-76992

Uncontrolled Memory Allocation in CODESYS Gateway Client

CODESYS Development System 3; CODESYS Gateway; CODESYS Edge Gateway for Windows; CODESYS HMI (SL)

The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate upper limit. An unauthenticated remote attacker controlling a malicious gateway can exploit this behavior to trigger excessive memory cons…

7.5Yüksek
CVE-2026-8047

Out-of-bounds Write in CODESYS Control

CODESYS CODESYS Control RTE (SL); CODESYS CODESYS Control RTE (for Beckhoff CX) SL; CODESYS CODESYS Control Win (SL); CODESYS CODESYS HMI (SL)

The affected products perform improper length checking when parsing incoming HTTP requests, resulting in a size-limited out-of-bounds write. An unauthenticated remote attacker can exploit this flaw to cause a denial of service via a system crash on the affect…

8.1Yüksek
CVE-2026-8046

Incorrect Authorization in CODESYS Control

CODESYS CODESYS Control RTE (SL); CODESYS CODESYS Control RTE (for Beckhoff CX) SL; CODESYS CODESYS Control Win (SL); CODESYS CODESYS HMI (SL)

The affected products insufficiently verify authorization when deleting user accounts. An authenticated, low-privileged remote user can exploit this vulnerability to delete other users, including those with higher privileges.

7.5Yüksek
CVE-2025-41738

CODESYS Control - Invalid type usage in visualization

CODESYS CODESYS Control RTE (SL); CODESYS CODESYS Control RTE (for Beckhoff CX) SL; CODESYS CODESYS Control Win (SL); CODESYS CODESYS HMI (SL)

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.