Codesys Control vulnerabilities

2 known vulnerabilities affecting codesys/control.

Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-33485CRITICALCVSS 9.8fixed in 4.2.0.0≤ 4.2.0.02021-08-03
CVE-2021-33485 [CRITICAL] CWE-787 CVE-2021-33485: CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
nvd
CVE-2021-36763HIGHCVSS 7.5fixed in 4.2.0.0≤ 4.2.0.02021-08-03
CVE-2021-36763 [HIGH] CWE-552 CVE-2021-36763: In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties. In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.
nvd