Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: CODESYS Runtime Toolkit 3.5.21.20 Clear all filters
TI-2025-27625 CVE-2025-41659 · GHSA-x97q-fjxx-pvxm

CODESYS Control PKI Exposure Enables Remote Certificate Access

Priority LOW 38

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00259 Published 2025-08-04 Fixed in 3.5.21.20, 4.17.0.0 CWE-732
TI-2025-27624 CVE-2025-41658 · GHSA-ff63-c723-v97g

CODESYS Toolkit Exposes Sensitive Files via Default Permissions

Priority LOW 24

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00137 Published 2025-08-04 Fixed in 3.5.21.20, 4.16.0.0 CWE-276