https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:14:45 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/certfr-2022-avi-017 https://cve.radiocsirt.org/vuln/euvd-2026-26269 EUVD-2026-26269 https://cve.radiocsirt.org/vuln/euvd-2026-26269 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29240 <p>The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.</p> <p>The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29240 https://cve.radiocsirt.org/vuln/fsa-202601 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/fsa-202601 https://cve.radiocsirt.org/vuln/ghsa-hp56-5pmq-v75c <p>The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.</p> <p>The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content.</p> https://cve.radiocsirt.org/vuln/ghsa-hp56-5pmq-v75c https://cve.radiocsirt.org/vuln/gsd-2021-29240 gsd-2021-29240 https://cve.radiocsirt.org/vuln/gsd-2021-29240 https://cve.radiocsirt.org/vuln/icsa-26-076-01 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/icsa-26-076-01 https://cve.radiocsirt.org/vuln/sevd-2022-011-06 <p>Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V3 Runtime, Development System and Gateway. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in denial of service or, in some cases, remote code execution. Customers should immediately ensure they have implemented cybersecurity best practices across their operations to protect themselves from possible exploitation of these vulnerabilities. Where appropriate, this includes locating their industrial systems and remotely accessible devices behind firewalls; installing physical controls to prevent unauthorized access; preventing mission-critical systems and devices from being accessed from outside networks; and following the mitigations and general security recommendations below. For additional information and support, please contact your Schneider Electric sales or service representative or Schneider Electric’s Customer Care Center. March 2023 Update: A remediation is available for HMISTU Series / HMIGTO Series / HMIGTU Series / HMIGTUX Series / HMIGK Series</p> <p>Schneider Electric is aware of multiple vulnerabilities disclosed by Codesys on CODESYS V3 Runtime, Development System and Gateway. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in denial of service or, in some cases, remote code execution. Customers should immediately ensure they have implemented cybersecurity best practices across their operations to protect themselves from possible exploitation of these vulnerabilities. Where appropriate, this includes locating their industrial systems and remotely accessible devices behind firewalls; installing physical controls to prevent unauthorized access; preventing mission-critical systems and devices from being accessed from outside networks; and following the mitigations and general security recommendations below. For additional information and support, please contact your Schneider Electric sales or service representative or Schneider Electric’s Customer Care Center. March 2023 Update: A remediation is available for HMISTU Series / HMIGTO Series / HMIGTU Series / HMIGTUX Series / HMIGK Series</p> https://cve.radiocsirt.org/vuln/sevd-2022-011-06 https://cve.radiocsirt.org/vuln/vde-2021-061 <p>The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.</p> <p>The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a worst case, attackers could execute arbitrary program code on the PC on which the PMC programming tool is used.</p> https://cve.radiocsirt.org/vuln/vde-2021-061