Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Careers
Contact
Book a demo

Get Started

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in Start free

Home
Vendors
Codesys
Control For Iot2000 Sl

codesys control for iot2000 sl Vulnerabilities: CVEs, CISA KEV & Security Advisories

56 CVEs

CS

codesys control for iot2000 sl Vulnerabilities

CVE security advisories and vulnerability history for control for iot2000 sl by codesys.

56

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.5

Avg CVSS

2019–2025

Last updated December 1, 2025

Overview

codesys control for iot2000 sl has 56 published CVE records since 2019, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting codesys control for iot2000 sl, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of codesys control for iot2000 sl's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High32

Medium22

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of codesys control for iot2000 sl's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No codesys control for iot2000 sl CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every codesys control for iot2000 sl version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.8.0.016 CVEs
< 4.10.0.015 CVEs
< 4.5.0.05 CVEs
3.0 <= v < 3.5.14.03 CVEs
< 4.6.0.02 CVEs
3.0 <= v < 3.5.14.202 CVEs
< 4.11.0.01 CVE
< 4.12.0.01 CVE
< 4.7.0.01 CVE
0.0.0.0 <= v < 4.16.0.01 CVE
0.0.0.0 <= v < 4.17.0.01 CVE
3.0 <= v < 3.5.16.01 CVE
3.0 <= v < 4.0.1.01 CVE
3.0 <= v < 4.1.0.01 CVE
3.0 <= v < 4.8.0.01 CVE
3.0.0.0 <= v < 4.8.0.01 CVE
4.16.0.0 <= v < 4.17.0.01 CVE
4.4.0.0 <= v < 4.5.0.01 CVE
4.5.0.0 <= v < 4.19.0.01 CVE

Fixed in

4.8.0.017 CVEs
4.10.0.015 CVEs
4.5.0.06 CVEs
3.5.14.03 CVEs
3.5.14.202 CVEs
4.17.0.02 CVEs
4.6.0.02 CVEs
3.5.16.01 CVE
4.0.1.01 CVE
4.1.0.01 CVE
4.11.0.01 CVE
4.12.0.01 CVE
4.16.0.01 CVE
4.19.0.01 CVE

Find a version

56 CVEs

Sort

CODESYS Control - Invalid type usage in visualization
CVE-2025-41738
Patch
CWE-843
High · CVSS 7.5
EPSS 0.4% (32th pct)2025-12-01
CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
CVE-2025-41691
Patch
CWE-476
High · CVSS 7.5
EPSS 0.5% (42th pct)2025-08-04
CODESYS Control PKI Exposure Enables Remote Certificate Access
CVE-2025-41659
Patch
CWE-732
High · CVSS 8.3
EPSS 0.2% (12th pct)2025-08-04
CODESYS Toolkit Exposes Sensitive Files via Default Permissions
CVE-2025-41658
Patch
CWE-276
Medium · CVSS 5.5
EPSS 0.1% (2th pct)2025-08-04
High vulnerability · 2024-06-04
CVE-2024-5000
Patch
CWE-131
High · CVSS 7.5
EPSS 0.6% (45th pct)2024-06-04
High vulnerability · 2023-12-05
CVE-2023-6357
Patch
CWE-78
High · CVSS 8.8
EPSS 1.0% (59th pct)2023-12-05
High vulnerability · 2023-08-03
CVE-2022-4046CWE-119
High · CVSS 8.8
EPSS 0.9% (57th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37559
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37558
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
CODESYS Heap-based Buffer Overflow in multiple products
CVE-2023-37557
Patch
CWE-787
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37556
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37555
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37554
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37553
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
CODESYS Improper Input Validation in CmpAppBP
CVE-2023-37552
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37551
Patch
CWE-552
Medium · CVSS 6.5
EPSS 0.5% (41th pct)2023-08-03
CODESYS: Improper Input Validation in CmpApp component
CVE-2023-37550
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37549
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37548
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37547
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37546
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-08-03
CVE-2023-37545
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.6% (48th pct)2023-08-03
Medium vulnerability · 2023-05-15
CVE-2022-47393
Patch
CWE-119
Medium · CVSS 6.5
EPSS 1.0% (59th pct)2023-05-15
Medium vulnerability · 2023-05-15
CVE-2022-47392
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.9% (56th pct)2023-05-15
High vulnerability · 2023-05-15
CVE-2022-47391
Patch
CWE-20
High · CVSS 7.5
EPSS 1.9% (78th pct)2023-05-15
High vulnerability · 2023-05-15
CVE-2022-47390
Patch
CWE-787
High · CVSS 8.8
EPSS 1.3% (69th pct)2023-05-15
High vulnerability · 2023-05-15
CVE-2022-47389
Patch
CWE-787
High · CVSS 8.8
EPSS 1.3% (69th pct)2023-05-15
High vulnerability · 2023-05-15
CVE-2022-47388
Patch
CWE-787
High · CVSS 8.8
EPSS 1.3% (69th pct)2023-05-15
CODESYS: Multiple products prone to stack based out-of-bounds write
CVE-2022-47387
Patch
CWE-787
High · CVSS 8.8
EPSS 1.3% (69th pct)2023-05-15
High vulnerability · 2023-05-15
CVE-2022-47386
Patch
CWE-787
High · CVSS 8.8
EPSS 1.4% (70th pct)2023-05-15

Showing 30 of 56

Common weakness types

The CWE weakness categories most often found in codesys control for iot2000 sl CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation17 CVEs
CWE-787Out-of-bounds Write13 CVEs
CWE-476NULL Pointer Dereference3 CVEs
CWE-276Incorrect Default Permissions2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-284Improper Access Control1 CVE
CWE-126Buffer Over-read1 CVE

Disclosure activity by year

How many codesys control for iot2000 sl CVEs were published each year.

2019

6

2021

2

2022

8

2023

35

2024

1

2025

4

Other codesys products

Browse vulnerabilities for other products by codesys.

control for linux sl56 CVEs control for pfc200 sl56 CVEs control for pfc100 sl55 CVEs control for raspberry pi sl55 CVEs control for beaglebone sl54 CVEs control for empc-a/imx6 sl52 CVEs control runtime system toolkit52 CVEs CODESYS Control for BeagleBone SL51 CVEs

All codesys vulnerabilities

Frequently asked questions

Common questions about codesys control for iot2000 sl vulnerabilities.

How many CVEs does codesys control for iot2000 sl have?: codesys control for iot2000 sl has 56 published CVE records since 2019.
How many codesys control for iot2000 sl CVEs are in CISA KEV?: None of codesys control for iot2000 sl's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for codesys control for iot2000 sl vulnerabilities?: No codesys control for iot2000 sl CVEs currently have a tracked public exploit in this dataset.
Which versions of codesys control for iot2000 sl are affected?: 34 distinct codesys control for iot2000 sl versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in codesys control for iot2000 sl CVEs?: codesys control for iot2000 sl's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-787 (Out-of-bounds Write), CWE-476 (NULL Pointer Dereference), CWE-276 (Incorrect Default Permissions).
How many critical codesys control for iot2000 sl vulnerabilities are there?: codesys control for iot2000 sl has 2 critical and 32 high-severity CVEs.
What is the average severity of codesys control for iot2000 sl CVEs?: The average CVSS base score across codesys control for iot2000 sl's scored CVEs is 7.5.

References

All codesys vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track codesys control for iot2000 sl vulnerabilities

Monitor new codesys control for iot2000 sl vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References

4.7.0.01 CVE