Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: CODESYS Control RTE (SL), Control RTE (for Beckhoff CX) SL and 13 more products 3.5.21.20, 4.17.0.0 Clear all filters
TI-2025-27654 CVE-2025-41691 · GHSA-wxg9-7gqq-wxgf

CODESYS Control DoS via Unauthenticated NULL Pointer Dereference

Priority MEDIUM 40

An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (D…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00639 Published 2025-08-04 Fixed in 3.5.21.20, 4.17.0.0 CWE-476
TI-2025-27625 CVE-2025-41659 · GHSA-x97q-fjxx-pvxm

CODESYS Control PKI Exposure Enables Remote Certificate Access

Priority LOW 38

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00259 Published 2025-08-04 Fixed in 3.5.21.20, 4.17.0.0 CWE-732