https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:17:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03572 bdu:2023-03572 https://cve.radiocsirt.org/vuln/bdu:2023-03572 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/euvd-2026-22470 EUVD-2026-22470 https://cve.radiocsirt.org/vuln/euvd-2026-22470 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21869 <p>An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.</p> <p>An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21869 https://cve.radiocsirt.org/vuln/fsa-202601 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/fsa-202601 https://cve.radiocsirt.org/vuln/ghsa-5vxq-fv88-x9jq <p>An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.</p> <p>An unsafe deserialization vulnerability exists in the Engine.plugin ProfileInformation ProfileData functionality of CODESYS GmbH CODESYS Development System 3.5.16 and 3.5.17. A specially crafted file can lead to arbitrary command execution. An attacker can provide a malicious file to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-5vxq-fv88-x9jq https://cve.radiocsirt.org/vuln/gsd-2021-21869 gsd-2021-21869 https://cve.radiocsirt.org/vuln/gsd-2021-21869 https://cve.radiocsirt.org/vuln/icsa-26-076-01 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/icsa-26-076-01 https://cve.radiocsirt.org/vuln/vde-2021-061 <p>The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.</p> <p>The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.</p> https://cve.radiocsirt.org/vuln/vde-2021-061