CoDe16; 16 Zero-Day Vulnerabilities Affecting CODESYS Framework Leading to Remote Code Execution

"CoDe16" is our code name for 16 zero-day vulnerabilities we have found in CODESYS which is a platform-independent software framework used for programing PLCs. CODESYS is extremely prevalent in Operational Technology, popular in many different industries (factory automation, energy, mobile, building, embedded, process, etc.), and supported by over 500 manufacturers (Schnieder Electric, Beckhoff, Wago, Eaton, ABB, Festo, etc.) covering numerous architectures (MIPS, Renesas, ARM, PowerPC, TriCore, etc.) spread across millions of devices across the globe....

By: Vladimir Eliezer Tokarev

Full …

automation building code code16 code execution codesys embedded energy etc factory factory automation found framework industries mobile name operational operational technology platform plcs popular prevalent process programing remote code remote code execution software technology vulnerabilities zero-day zero-day vulnerabilities