Most recent entries from all

EUVD-2026-29473

fkie_cve-2021-36765

In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system.

FSA-202601 — Several CODESYS vulnerabilities in Festo Automation Suite

Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.

This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

GHSA-3mpj-h64q-x7gf

gsd-2021-36765

ICSA-26-076-01 — CODESYS in Festo Automation Suite

Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.

VDE-2022-035 — WAGO: Multiple product series affected by multiple CODESYS vulnerabilities

Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.