CVEvulnerability

CVE-2025-41738

7.5 HIGH Published 2025-12-01 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-12-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-843

Description

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

Affected configurations

• codesys control for beaglebone sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for empc-a\/imx6 sl (>= 4.5.0.0 <= 4.19.0.0) • codesys control for iot2000 sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for linux arm sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for linux sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for pfc100 sl (>= 4.5.0.0 <= 4.19.0.0) • codesys control for pfc200 sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for plcnext sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for raspberry pi sl (>= 4.5.0.0 < 4.19.0.0) • codesys control for wago touch panels 600 sl (>= 4.5.0.0 <= 4.19.0.0) • codesys control rte sl (>= 3.5.18.0 < 3.5.21.40) • codesys control rte sl \(for beckhoff cx\) (>= 3.5.18.0 < 3.5.21.40) • codesys control win sl (>= 3.5.18.0 < 3.5.21.40) • codesys hmi sl (>= 3.5.18.0 < 3.5.21.40) • codesys remote target visu (>= 3.5.18.0 < 3.5.21.40) • codesys runtime toolkit (>= 3.5.18.0 < 3.5.21.40) • codesys virtual control sl (>= 4.5.0.0 < 4.19.0.0)

Related

Weakness · CWE (1)

  • CWE-843 Access of Resource Using Incompatible Type weakness

References