https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 09:49:09 +0000 https://cve.radiocsirt.org/vuln/3adr011377 <p>An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357), crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to files (CVE-2024-12429) or enable command execution (CVE-2024-12430). The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.</p> <p>An update is available that resolves a publicly reported vulnerability in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could call shell functions (CVE-2023-6357), crash the PLC (CVE-2024-5000), crash the web server of the PLC (CVE-2024-8175), grant read access to files (CVE-2024-12429) or enable command execution (CVE-2024-12430). The vulnerabilities CVE-2023-6357, CVE-2024-12429 and CVE-2024-12430 require successful authentication.</p> https://cve.radiocsirt.org/vuln/3adr011377 https://cve.radiocsirt.org/vuln/advisory2024-05_vde-2024-057 <p>The CODESYS web server component of the CODESYS Control runtime system is used by the CODESYS WebVisu to display visualization screens in a web browser. Receiving a specifically crafted TLS packet on an HTTPS connection causes the CODESYS web server to crash because the return value of an underlying function is not checked correctly for such unusual conditions.</p> <p>The CODESYS web server component of the CODESYS Control runtime system is used by the CODESYS WebVisu to display visualization screens in a web browser. Receiving a specifically crafted TLS packet on an HTTPS connection causes the CODESYS web server to crash because the return value of an underlying function is not checked correctly for such unusual conditions.</p> https://cve.radiocsirt.org/vuln/advisory2024-05_vde-2024-057 https://cve.radiocsirt.org/vuln/bdu:2024-07535 bdu:2024-07535 https://cve.radiocsirt.org/vuln/bdu:2024-07535 https://cve.radiocsirt.org/vuln/euvd-2026-188059 EUVD-2026-188059 https://cve.radiocsirt.org/vuln/euvd-2026-188059 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8175 <p>An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.</p> <p>An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8175 https://cve.radiocsirt.org/vuln/fsa-202601 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/fsa-202601 https://cve.radiocsirt.org/vuln/ghsa-v6p4-r397-q442 <p>An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.</p> <p>An unauthenticated remote attacker can causes the CODESYS web server to access invalid memory which results in a DoS.</p> https://cve.radiocsirt.org/vuln/ghsa-v6p4-r397-q442 https://cve.radiocsirt.org/vuln/icsa-26-076-01 <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> <p>Starting with Festo Automation Suite (FAS) version 2.8.0.138, the suite is delivered only with a connector to Codesys, rather than including Codesys directly. Prior to this version, Codesys was bundled within the FAS installation. From version 2.8.0.138 onwards, customers are required to download and install Codesys independently.</p> <p>This change impacts the handling of security vulnerabilities (CVEs) related to Codesys. Any Codesys-related security issues must now be addressed by the customer through their separate Codesys installation. The FAS itself includes only the connector component, which is maintained and updated within the suite.</p> <p>Please ensure that Codesys is kept up to date independently to mitigate any potential security risks associated with the Codesys software.</p> https://cve.radiocsirt.org/vuln/icsa-26-076-01 https://cve.radiocsirt.org/vuln/vde-2024-072 <p>The following firmware versions installed on several devices are vulnerable due to a vulnerability in the CODESYS Control V3 web server.</p> <p>The following firmware versions installed on several devices are vulnerable due to a vulnerability in the CODESYS Control V3 web server.</p> https://cve.radiocsirt.org/vuln/vde-2024-072 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2208 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CODESYS ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in CODESYS ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2208