Codesys

Codesys develops industrial automation and control runtime systems widely deployed across embedded IoT and programmable logic controllers, a segment that spans multiple form factors including gateway appliances and specialized runtime toolkits. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, reflecting the memory-safety and input-handling demands of real-time control software and the consequence of flaws in safety-critical systems. The exposure concentrates across products such as the Control platform for IoT2000 and PFC series controllers, as well as the runtime system toolkit, and recurs through weakness classes including out-of-bounds writes, improper input validation, untrusted deserialization, and NULL-pointer dereferences that are characteristic of C-based automation runtime stacks. Defenders operating industrial networks should treat this vendor's advisories as high-priority, particularly for internet-exposed or networked gateways; current exploitation activity and exposure counts are shown alongside this summary.