NVD公開月 2023-08
20 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2022-4046 | Modified | 未確認 | CWE-119 | In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access |
| CVE-2023-3662 | Modified | 未確認 | CWE-427 | In CODESYS Development System versions from 3.5.17.0 and prior to 3.5.19.20 a vulnerability allows for execution of binaries from the current working directory in the users context |
| CVE-2023-3663 | Modified | 未確認 | CWE-940 | In CODESYS Development System versions from 3.5.11.20 and before 3.5.19.20 a missing integrity check might allow an unauthenticated remote attacker to manipulate the content of not |
| CVE-2023-3669 | Modified | 未確認 | CWE-307 | A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have unlimited attempts of guessing the password within an import dialo |
| CVE-2023-37545 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37546 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37547 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37548 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37549 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37550 | Modified | 未確認 | CWE-20 | In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37551 | Modified | 未確認 | CWE-552 | In multiple Codesys products in multiple versions, after successful authentication as a user, specially crafted network communication requests can utilize the CmpApp component to d |
| CVE-2023-37552 | Modified | 未確認 | CWE-20 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37553 | Modified | 未確認 | CWE-20 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37554 | Modified | 未確認 | CWE-20 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37555 | Modified | 未確認 | CWE-20 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37556 | Modified | 未確認 | CWE-20 | In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with inconsistent content can cause th |
| CVE-2023-37557 | Modified | 未確認 | CWE-787 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote communication requests can cause the CmpAppBP component to over |
| CVE-2023-37558 | Modified | 未確認 | CWE-20 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the |
| CVE-2023-37559 | Modified | 未確認 | CWE-20 | After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inconsistent content can cause the |
| CVE-2023-4346 | Analyzed | 掲載 | CWE-645 | KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gai |