Hmi sl

This hub aggregates every CVE we track for Hmi sl, a product in the ics ot iot space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Hmi sl.

• CVE-2022-4046CODESYS: Improper memory restrictions fro CODESYS Control8.8Aug 3, 2023
• CVE-2022-22508CODESYS V3: Improper Input Validation4.3May 15, 2023
• CVE-2022-4224CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V38.8Mar 23, 2023
• CVE-2022-31805Insecure transmission of credentials7.5Jun 24, 2022
• CVE-2022-22519Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.7.5Apr 7, 2022
• CVE-2022-22517Communication Components in multiple CODESYS products vulnerable to communication channel disruption7.5Apr 7, 2022
• CVE-2022-22515A component of the CODESYS Control runtime system allows read and write access to configuration files8.1Apr 7, 2022
• CVE-2022-22514Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.7.1Apr 7, 2022
• CVE-2022-22513Null Pointer Dereference in multiple CODESYS products can lead to a DoS.6.5Apr 7, 2022
• CVE-2019-9013An issue was discovered in 3S-Smart CODESYS V3 products. The application may utilize non-TLS based encryption, which results in user credentials being insufficiently protected during transport. All...8.8Aug 15, 2019
• CVE-2018-20026Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0.7.5Feb 19, 2019
• CVE-2018-20025Use of Insufficiently Random Values exists in CODESYS V3 products versions prior V3.5.14.0.7.5Feb 19, 2019
• CVE-2018-10612In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which could allow an attack...9.8Jan 29, 2019