codesys plcwinnt

Name: codesys plcwinnt
Brand: codesys

productUS

cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

unpatched

critical

by severity

0critical3high14medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-30186US	high7.5	7.74% (95th)	—	2.4.7.55	2021-05-25	< 2.4.7.55
CVE-2021-30195US	high7.5	7.55% (94th)	—	2.4.7.55	2021-05-25	< 2.4.7.55
CVE-2021-34593US	medium5.0	2.66% (86th)	—	2.4.7.56	2021-10-26	< 2.4.7.56
CVE-2022-32137US	medium6.5	1.43% (73rd)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-31806US	medium6.8OT elevated	1.23% (69th)	—	2.4.7.57	2022-06-24	< 2.4.7.57
CVE-2022-32143US	medium6.5	1.22% (69th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-32138US	medium6.5	1.22% (69th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2019-19789US	medium6.5	1.22% (68th)	—	2.4.7.54	2019-12-20	< 2.4.7.54
CVE-2022-32142US	medium5.5	1.08% (65th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-1965US	medium5.5	1.08% (65th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-32140US	medium4.0	1.06% (65th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-32136US	medium6.5	1.05% (64th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-32141US	medium4.0	1.05% (64th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-32139US	medium4.0	1.05% (64th)	—	2.4.7.57	2022-06-24	2.0 → 2.4.7.57
CVE-2022-31805US	medium4.3	1.05% (64th)	—	2.4.7.57	2022-06-24	< 2.4.7.57
CVE-2021-34595US	high8.1	0.85% (58th)	—	2.4.7.56	2021-10-26	< 2.4.7.56
CVE-2021-34596US	medium6.5	0.83% (57th)	—	2.4.7.56	2021-10-26	< 2.4.7.56

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read3 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-755Improper Handling of Exceptional Conditions2 CVEs
CWE-82Improper Neutralization of Script in Attributes of IMG Tags in a Web Page2 CVEs
CWE-823Use of Out-of-range Pointer Offset2 CVEs
CWE-824Access of Uninitialized Pointer2 CVEs
CWE-1188Initialization of a Resource with an Insecure Default1 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.