CODESYS CODESYS V2

Name: CODESYS CODESYS V2
Brand: CODESYS

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

by severity

1critical3high3medium0low

updated 2026-10-27

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-34586US	high7.5	13.7% (96th)	—	V1.1.9.22	2021-10-26	all web servers → V1.1.9.22
CVE-2021-34583US	high7.5	8.84% (95th)	—	V1.1.9.22	2021-10-26	all web servers → V1.1.9.22
CVE-2021-34593US	medium5.0	2.66% (86th)	—	V2.4.7.56	2021-10-26	2 versions
CVE-2021-34584US	critical9.1	1.08% (65th)	—	V1.1.9.22	2021-10-26	all web servers → V1.1.9.22
CVE-2021-34585US	medium5.0	0.90% (60th)	—	V1.1.9.22	2021-10-26	all web servers → V1.1.9.22
CVE-2021-34595US	high8.1	0.85% (58th)	—	V2.4.7.56	2021-10-26	2 versions
CVE-2021-34596US	medium6.5	0.83% (57th)	—	V2.4.7.56	2021-10-26	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-126Buffer Over-read1 CVEs
CWE-252Unchecked Return Value1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)1 CVEs
CWE-755Improper Handling of Exceptional Conditions1 CVEs
CWE-787Out-of-bounds Write1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.