Security Informationen
Mit zunehmender Vernetzung von Maschinen und Anlagen via Internet spielt der Schutz vor Cyberattacken eine immer größere Rolle. Das Thema Security hat deshalb für die CODESYS Group hohe Priorität und ist integraler Bestandteil des Entwicklungsprozesses.
Die in den CODESYS-Produkten integrierten Security-Funktionen werden permanent gepflegt und erweitert. Alle CODESYS Softwarekomponenten werden regelmäßig auf potenzielle Sicherheitslücken überprüft. Zudem verpflichtet sich die CODESYS Group, verifizierte Sicherheitslücken in einem angemessenen Zeitraum zu beheben. In unserem Security Whitepaper (PDF) finden Sie alle wichtigen Informationen rund um das Thema CODESYS Security.
Security-Meldungen
In der folgenden Tabelle finden Sie die von der CODESYS Group veröffentlichten Security-Advisories. Diese beinhalten die wichtigsten Informationen zu bekannten Sicherheitslücken, einschließlich Empfehlungen für eventuelle Workarounds und verfügbare Security-Updates. Ob und in welchem Zeitrahmen die empfohlenen Updates von den Herstellern der mit CODESYS programmierbaren Geräte übernommen werden, obliegt der technischen Einschätzung des jeweiligen Geräteherstellers.
| Letzte Änderung | Advisory-Nummer | Advisory | Herunterladen | |
|---|---|---|---|---|
| 03.04.2025 | 2024-05 | CODESYS Control V3 web server | CSAF | |
| 03.04.2025 | 2025-03 | CODESYS Control V3 removable media path traversal | CSAF | |
| 18.03.2025 | 2025-02 | CODESYS (Edge) Gateway for Windows insecure default | CSAF | |
| 18.03.2025 | 2025-04 | CODESYS Control V3 - OPC UA Server Authentication bypass | CSAF | |
| 21.01.2025 | 2025-01 | CODESYS Key | CSAF | |
| 11.12.2024 | 2024-02 | CODESYS Control Win and CODESYS (Edge) Gateway for Windows | ||
| 12.09.2024 | 2024-04 | OSCAT Basic Library | ||
| 05.07.2024 | 2024-03 | CODESYS Control V3 - OPC UA Stack | ||
| 06.05.2024 | 2024-01 | CODESYS Development System V2.3 | ||
| 26.02.2024 | 2023-11 | CODESYS Control V3 on Linux and QNX operating systems | ||
| 05.12.2023 | 2023-10 | CODESYS products containing WIBU CodeMeter Runtime | ||
| 31.10.2023 | 2023-05 | CODESYS Control V3 | ||
| 31.10.2023 | 2023-07 | CODESYS Development System V3 | ||
| 03.08.2023 | 2023-04 | CODESYS Control V3 | ||
| 03.08.2023 | 2023-06 | CODESYS Development System V3 | ||
| 03.08.2023 | 2023-08 | CODESYS Development System V3 | ||
| 26.07.2023 | 2023-09 | CODESYS Scripting | ||
| 27.06.2023 | 2022-03 | Security update for SysDrv3S | ||
| 04.04.2023 | 2023-01 | Security update for CODESYS Control V3 file access | ||
| 04.04.2023 | 2023-02 | Security update for CODESYS Control V3 | ||
| 04.04.2023 | 2023-03 | Security update for CODESYS runtime system V3 communication server | ||
| 26.01.2023 | 2022-16 | Security update for CODESYS Control V3 communication server | ||
| 14.12.2022 | 2018-04 | Security update for CODESYS V2 and V3 runtime systems | ||
| 14.12.2022 | 2022-12 | Security update for CODESYS V2 password transport | ||
| 14.12.2022 | 2022-15 | Security update for CODESYS V3 boot application encryption | ||
| 13.11.2022 | 2022-02 | Security update for CODESYS Control V3 configuration file access | ||
| 03.11.2022 | 2022-04 | Security update for various CODESYS V3 products using the CODESYS communication protocol | ||
| 03.11.2022 | 2022-05 | Security update for CODESYS Control V3 online user management | ||
| 03.11.2022 | 2022-06 | Security update for several CODESYS V3 products containing a CODESYS communication server | ||
| 03.11.2022 | 2022-07 | Security update for CODESYS V3 web server | ||
| 03.11.2022 | 2022-09 | Security update for CODESYS V3 products containing a CODESYS communication server | ||
| 06.10.2022 | 2021-15 | Security update for CODESYS V2 web server | ||
| 06.10.2022 | 2021-18 | Security update for CODESYS Git | ||
| 06.10.2022 | 2022-10 | Security update for CODESYS OPC DA Server V3 | ||
| 06.10.2022 | 2022-14 | Security update for CODESYS V3 Visualization | ||
| 27.07.2022 | 2021-13 | Security update for CODESYS Development System V3 including CODESYS Installer and CODESYS SVN | ||
| 23.06.2022 | 2022-11 | Security update for CODESYS Control V2 | ||
| 23.06.2022 | 2022-13 | Security update for CODESYS Gateway V2 | ||
| 14.04.2022 | 2022-08 | Security Note: Framework for attacks on ICS and SCADA systems (INCONTROLLER / PIPEDREAM) | ||
| 27.01.2022 | 2022-01 | Security update for CODESYS PROFINET | ||
| 30.11.2021 | 2021-04 | Security update for CODESYS Gateway V3 | ||
| 25.10.2021 | 2021-06 | Security update for CODESYS Control V2 communication | ||
| 25.10.2021 | 2021-16 | Security update for CODESYS Control V2 TCP/IP communication driver | ||
| 25.10.2021 | 2021-17 | Security update for CODESYS Control V2 | ||
| 30.08.2021 | 2021-09 | Security update for CODESYS V3 web server | ||
| 30.08.2021 | 2021-11 | Security update for CODESYS V3 web server file access | ||
| 30.08.2021 | 2021-12 | Security update for CODESYS Gateway V3 | ||
| 22.07.2021 | 2021-10 | Security update for CODESYS V3 Runtime Toolkit for VxWorks | ||
| 22.07.2021 | 2021-14 | Security update for CODESYS EtherNetIP | ||
| 15.07.2021 | 2021-07 | Security update for CODESYS V2 web server | ||
| 18.05.2021 | 2021-01 | Security update for various CODESYS V3 products using the CODESYS communication protocol | ||
| 11.05.2021 | 2021-08 | Security update for CODESYS Control V2 Linux SysFile library implementation | ||
| 28.04.2021 | 2021-02 | Security update for CODESYS V3 Package Manager | ||
| 28.04.2021 | 2021-03 | Security update for CODESYS V3 Library Manager | ||
| 28.04.2021 | 2021-05 | Security update for CODESYS Automation Server | ||
| 29.03.2021 | 2019-08 | Security update for CODESYS Control V3 password handling | ||
| 29.03.2021 | 2019-08 | Security update for CODESYS Control V3 password handling | ||
| 02.10.2020 | 2020-06 | Security update for several CODESYS V2 and V3 products containing WIBU CodeMeter Runtime | ||
| 23.07.2020 | 2020-05 | Security update for CODESYS V3 Visualization | ||
| 22.07.2020 | 2020-02 | Security update for various CODESYS V3 products using the CODESYS communication protocol | ||
| 06.05.2020 | 2019-05 | Security update for CODESYS V3 Library Manager | ||
| 06.05.2020 | 2020-04 | Security update for CODESYS V3 Visualization | ||
| 01.04.2020 | 2020-03 | Security update for CODESYS V3 web server | ||
| 23.01.2020 | 2020-01 | Security update for several CODESYS V3 products containing a CODESYS communication server | ||
| 18.12.2019 | 2018-05 | Security update for CODESYS V3 web server | ||
| 18.12.2019 | 2019-01 | Security update for CODESYS V3 web server | ||
| 18.12.2019 | 2019-02 | Security update for CODESYS Gateway V3 channel management | ||
| 18.12.2019 | 2019-03 | Security update for CODESYS Gateway V3 memory management | ||
| 18.12.2019 | 2019-04 | Security update for CODESYS Control V3 online user management | ||
| 18.12.2019 | 2019-06 | Security update for several CODESYS V3 products containing a CODESYS communication server | ||
| 18.12.2019 | 2019-07 | Security update for CODESYS Control V3 OPC UA Server | ||
| 18.12.2019 | 2019-10 | Security update for CODESYS V3 web server | ||
| 18.12.2019 | 2019-11 | Security update for CODESYS Control V2 | ||
| 18.04.2019 | 2018-10 | Security update for CODESYS Control V3 security features | ||
| 21.01.2019 | 2018-11 | Security update for CODESYS V3 TCP communication driver | ||
| 19.12.2018 | 2018-13 | Security update for several CODESYS V3 products containing a CODESYS communication server | ||
| 19.12.2018 | 2018-14 | Security update for various CODESYS V3 products using the CODESYS communication protocol | ||
| 17.12.2018 | 2018-07 | Security update for CODESYS Control V3 Trace Manager | ||
| 17.12.2018 | 2018-08 | Security update for CODESYS Control V3 TLS socket communication | ||
| 17.12.2018 | 2018-09 | Security update for CODESYS Development System V3 Alarm configuration | ||
| 17.12.2018 | 2018-12 | Security update for CODESYS Development System V3 compiled libraries | ||
| 11.07.2018 | 2018-02 | Security update for CODESYS Control V3 OPC UA Server | ||
| 11.07.2018 | 2018-06 | Security update for CODESYS Control V3 and CODESYS HMI V3 - OpenSSL update | ||
| 15.03.2018 | 2017-08 | Security update for CODESYS SVN - Apache Subversion® update | ||
| 15.03.2018 | 2018-03 | Security update for CODESYS SVN - OpenSSL update | ||
| 02.02.2018 | 2018-01 | Security update for CODESYS V2.3 web server | ||
| 20.12.2017 | 2017-07 | Security update for CODESYS Control V3 OPC UA Server | ||
| 20.12.2017 | 2017-09 | Security update for CODESYS V3 web server | ||
| 13.07.2017 | 2017-03 | Security update for various CODESYS V3 products using the CODESYS communication protocol | ||
| 13.07.2017 | 2017-04 | Security update for several CODESYS V3 products installation setup | ||
| 13.07.2017 | 2017-05 | Security update for HMAC signature check in CODESYS Control V3 | ||
| 13.07.2017 | 2017-06 | Security update for various CODESYS V3 products using the CODESYS UDP communication protocol | ||
| 26.04.2017 | 2017-02 | Security update for CODESYS SVN - OpenSSL update | ||
| 25.04.2017 | 2016-01 | Security update for CODESYS V2.3 web server | ||
| 25.04.2017 | 2016-02 | Security update for CODESYS SVN - Apache Subversion update | ||
| 20.03.2017 | 2017-01 | Security update for CODESYS Control V3 OPC UA Server | ||
| 17.02.2017 | 2016-03 | Security update for several CODESYS products using pthreads DLL | ||