Control For Plcnext Codesys Control For Plcnext

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in Codesys Control For Plcnext.

By the Year

In 2026 there have been 0 vulnerabilities in Codesys Control For Plcnext. Control For Plcnext did not have any published security vulnerabilities last year.

Year Vulnerabilities Average Score
2026 0 0.00
2025 0 0.00
2024 0 0.00
2023 0 0.00
2022 3 7.60
2021 0 0.00
2020 4 8.65
2019 1 0.00

It may take a day or so for new Control For Plcnext vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Codesys Control For Plcnext Security Vulnerabilities

CODESYS V3 3.5.16.0 CmpUserMgr Weak Hash Exploit
CVE-2020-12069 7.8 - High - December 26, 2022

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

Use of Password Hash With Insufficient Computational Effort

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption
CVE-2022-30792 7.5 - High - July 11, 2022

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Resource Exhaustion

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption
CVE-2022-30791 7.5 - High - July 11, 2022

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

Resource Exhaustion

CODESYS Control runtime system before 3.5.16.10
CVE-2020-15806 7.5 - High - July 22, 2020

CODESYS Control runtime system before 3.5.16.10 allows Uncontrolled Memory Allocation.

Allocation of Resources Without Limits or Throttling

An issue was discovered in CODESYS Development System before 3.5.16.0
CVE-2020-12068 - May 14, 2020

An issue was discovered in CODESYS Development System before 3.5.16.0. CODESYS WebVisu and CODESYS Remote TargetVisu are susceptible to privilege escalation.

CODESYS V3 web server before 3.5.15.40
CVE-2020-10245 9.8 - Critical - March 26, 2020

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.

Memory Corruption

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30
CVE-2020-7052 - January 24, 2020

CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition.

CODESYS 3 web server before 3.5.15.20
CVE-2019-18858 - November 20, 2019

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow.

Stay on top of Security Vulnerabilities

Want an email whenever new vulnerabilities are published for Codesys Control For Plcnext or by Codesys? Click the Watch button to subscribe.

Codesys
Vendor

subscribe