Read the docs
TI-2024-27995 Aliases CVE-2024-41975GHSA-f9hf-p7m4-xh2g

CODESYS (Edge) Gateway for Windows insecure default

Priority LOW 30CWE-1188Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00447 39th percentileScored 2026-11-07
Fix Fixed CODESYS Edge Gateway (CODESYS): 3.5.21.0CODESYS Gateway for Windows (CODESYS): 3.5.21.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CODESYSCODESYS Edge Gatewaybefore 3.5.21.03.5.21.0Patch availableCNA
CODESYSCODESYS Gateway for Windowsbefore 3.5.21.03.5.21.0Patch availableCNA
  • CODESYS Edge Gateway VendorCODESYS Affected before 3.5.21.0 Fixed in 3.5.21.0 Patch available CNA
  • CODESYS Gateway for Windows VendorCODESYS Affected before 3.5.21.0 Fixed in 3.5.21.0 Patch available CNA

Remediation

  • Fix · CNA CODESYS Edge Gateway (CODESYS) Fixed in 3.5.21.0
  • Fix · CNA CODESYS Gateway for Windows (CODESYS) Fixed in 3.5.21.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-41975
  2. 2026-10-03 Alias added: GHSA-f9hf-p7m4-xh2g

References

Other 1

  • TI-2021-12888 CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2019-10180 Stack-based buffer overflow in CODESYS V3 web server CVSS 3.1CRITICAL 9.8
  • TI-2021-13604 CODESYS V2 web server: crafted requests could trigger a null pointer dereference (DoS) CVSS 3.1HIGH 7.5
  • TI-2020-08257 CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow. CVSS 3.1CRITICAL 9.8
  • TI-2019-13592 CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overflow. CVSS 3.1CRITICAL 9.8
  • TI-2017-03937 Unrestricted file upload in 3S-Smart Software Solutions GmbH CODESYS Web Server CVSS 3.0CRITICAL 9.8
See all 155 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences