CODESYS GmbH CODESYS Development System

Name: CODESYS GmbH CODESYS Development System
Brand: CODESYS GmbH

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical5high0medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-21864US	high7.8	1.86% (79th)	—	no fix	2021-08-02	2 versions
CVE-2021-21866US	high7.8	1.80% (78th)	—	no fix	2021-08-02	2 versions
CVE-2021-21865US	high7.8	1.40% (72nd)	—	no fix	2021-08-02	2 versions
CVE-2021-21863US	high7.8	1.21% (68th)	—	no fix	2021-08-05	2 versions
CVE-2023-3663US	—OT elevated	1.02% (63rd)	—	no fix	2023-08-03	3.5.11.0 → 3.5.19.20
CVE-2019-9013US	high8.8OT elevated	0.28% (21st)	—	no fix	2019-08-15	≤ 3.5.16.0
CVE-2025-41700US	—	0.15% (5th)	—	no fix	2025-12-01	≤ 3.5.21.40
CVE-2023-3669US	—OT elevated	0.15% (4th)	—	no fix	2023-08-03	≤ 3.5.19.20

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data5 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-50Path Equivalence: '//multiple/leading/slash'1 CVEs
CWE-522Insufficiently Protected Credentials1 CVEs
CWE-924Improper Enforcement of Message Integrity During Transmission in a Communication Channel1 CVEs
CWE-940Improper Verification of Source of a Communication Channel1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.