Vulnerability-Lookup

CVE-2025-41738 (GCVE-0-2025-41738)

Vulnerability from cvelistv5 – Published: 2025-12-01 10:02 – Updated: 2025-12-01 14:00

Title

CODESYS Control - Invalid type usage in visualization

Summary

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-01 13:59 UTC

CWE

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

CERTVDE CNA under the icscert root

CNA scorecard B 76/100 over 144 records in the last 180 days details

References

1 reference

URL	Tags
https://certvde.com/de/advisories/VDE-2025-100

Impacted products

17 products

Vendor	Product	Version	CPE status
CODESYS	CODESYS Control RTE (SL)	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS Control RTE (for Beckhoff CX) SL	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS Control Win (SL)	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS HMI (SL)	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS Remote Target Visu	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS Runtime Toolkit	Affected: 3.5.18.0 , < 3.5.21.40 (semver)	guessed
CODESYS	CODESYS Control for BeagleBone SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for emPC-A/iMX6 SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for IOT2000 SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for Linux ARM SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for Linux SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for PFC100 SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for PFC200 SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for PLCnext SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for Raspberry Pi SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Control for WAGO Touch Panels 600 SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed
CODESYS	CODESYS Virtual Control SL	Affected: 4.5.0.0 , < 4.19.0.0 (semver)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-41738",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-01T13:59:44.375519Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-01T14:00:28.509Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Remote Target Visu",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux ARM SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Virtual Control SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.\u003cbr\u003e"
            }
          ],
          "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-843",
              "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-01T10:02:33.407Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://certvde.com/de/advisories/VDE-2025-100"
        }
      ],
      "source": {
        "advisory": "VDE-2025-100",
        "defect": [
          "CERT@VDE#641889"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "CODESYS Control - Invalid type usage in visualization",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2025-41738",
    "datePublished": "2025-12-01T10:02:33.407Z",
    "dateReserved": "2025-04-16T11:17:48.320Z",
    "dateUpdated": "2025-12-01T14:00:28.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-41738",
      "date": "2026-10-15",
      "epss": "0.00389",
      "percentile": "0.31349"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control RTE (SL)",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control RTE (for Beckhoff CX) SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control Win (SL)",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS HMI (SL)",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Remote Target Visu",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Runtime Toolkit",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "3.5.21.40",
                    "status": "affected",
                    "version": "3.5.18.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for BeagleBone SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for emPC-A/iMX6 SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for IOT2000 SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for Linux ARM SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for Linux SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for PFC100 SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for PFC200 SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for PLCnext SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for Raspberry Pi SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Control for WAGO Touch Panels 600 SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "CODESYS Virtual Control SL",
                "vendor": "CODESYS",
                "versions": [
                  {
                    "lessThan": "4.19.0.0",
                    "status": "affected",
                    "version": "4.5.0.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "info@cert.vde.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AC30C449-D8D5-4789-875B-770BA22CB50A",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A00DF2DC-04B9-498C-9AF0-1205A45A104C",
                    "versionEndIncluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C245753D-52F6-4B11-8724-8DC05C7149F7",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4B16CF88-9B70-4B28-92AB-F5CD49ADE513",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9D4B874C-2402-4208-85B8-EBC03D092678",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B0B3369D-A9E4-4362-8A2B-947C6B89C4A6",
                    "versionEndIncluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "BA58388A-4084-47CB-8078-2B3405DA3D95",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "15F6992D-80C0-43FE-AFD3-241F1F44B078",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9F9F69C3-3C0A-4D08-94EE-C9FFD21FD89E",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "53BE2A4B-940C-499C-854F-CD8B99FD4EB5",
                    "versionEndIncluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E36769BE-B465-450C-B584-075E969CE608",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_rte_sl_\\(for_beckhoff_cx\\):*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D8CCA570-A3CE-46CF-BBD1-384DFBD8DA4C",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "827EB8A7-01B0-4414-A20C-6B2FABF9E384",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "897A1436-7A4E-4AF2-8A62-77DA592321F8",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:remote_target_visu:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4E7C54E1-5F4B-4436-BEF7-F86EB783D1F1",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "C5DC5E0B-5D9A-4A6D-8894-97EF707151EF",
                    "versionEndExcluding": "3.5.21.40",
                    "versionStartIncluding": "3.5.18.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:codesys:virtual_control_sl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "492FCFE5-1A20-494D-A872-A5FAF463EE30",
                    "versionEndExcluding": "4.19.0.0",
                    "versionStartIncluding": "4.5.0.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition."
          }
        ],
        "id": "CVE-2025-41738",
        "lastModified": "2026-06-17T09:23:03.883",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "info@cert.vde.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2025-41738",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-01T13:59:44.375519Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2025-12-01T10:16:01.130",
        "references": [
          {
            "source": "info@cert.vde.com",
            "tags": [
              "Third Party Advisory"
            ],
            "url": "https://certvde.com/de/advisories/VDE-2025-100"
          }
        ],
        "sourceIdentifier": "info@cert.vde.com",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-843"
              }
            ],
            "source": "info@cert.vde.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-12-02T10:22:07+00:00",
      "cve": "CVE-2025-41738",
      "id": "CVE-2025-41738",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CODESYS Control - Invalid type usage in visualization",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-41738.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2025-41738",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-12-01T13:59:44.375519Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-12-01T14:00:21.533Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control RTE (SL)",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control RTE (for Beckhoff CX) SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control Win (SL)",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS HMI (SL)",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Remote Target Visu",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Runtime Toolkit",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "3.5.21.40",
                  "status": "affected",
                  "version": "3.5.18.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for BeagleBone SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for emPC-A/iMX6 SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for IOT2000 SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for Linux ARM SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for Linux SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for PFC100 SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for PFC200 SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for PLCnext SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for Raspberry Pi SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Control for WAGO Touch Panels 600 SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "CODESYS Virtual Control SL",
              "vendor": "CODESYS",
              "versions": [
                {
                  "lessThan": "4.19.0.0",
                  "status": "affected",
                  "version": "4.5.0.0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.\u003cbr\u003e"
                }
              ],
              "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2025-12-01T10:02:33.407Z",
            "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
            "shortName": "CERTVDE"
          },
          "references": [
            {
              "url": "https://certvde.com/de/advisories/VDE-2025-100"
            }
          ],
          "source": {
            "advisory": "VDE-2025-100",
            "defect": [
              "CERT@VDE#641889"
            ],
            "discovery": "UNKNOWN"
          },
          "title": "CODESYS Control - Invalid type usage in visualization",
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "assignerShortName": "CERTVDE",
        "cveId": "CVE-2025-41738",
        "datePublished": "2025-12-01T10:02:33.407Z",
        "dateReserved": "2025-04-16T11:17:48.320Z",
        "dateUpdated": "2025-12-01T14:00:28.509Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

3ADR011565

Vulnerability from csaf_abb - Published: 2026-09-28 00:30 - Updated: 2026-09-28 00:30

Summary

AC500 V3 - Invalid type usage in visualization

Scope

1 vulnerability in this advisory, including CVE-2025-41738.

CVE-2025-41738

A vulnerability in the runtime system's CmpVisuServer component allows attackers to cause a denial-of-service (DoS) by sending special request to the web visualization. The issue is triggered by an internal read access using a pointer of wrong type. The vulnerability can only be exploited if the web server is running.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C

Fixed: 1 product Known affected: 1 product

Open the full advisory

ADVISORY2025-10_VDE-2025-100

Vulnerability from csaf_codesysgmbh - Published: 2025-12-01 10:00 - Updated: 2026-02-12 11:00

Summary

CODESYS Control - Invalid type usage in visualization

Severity

High

Scope

1 vulnerability in this advisory, including CVE-2025-41738.

CVE-2025-41738

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Fixed: 17 products Known affected: 17 products

Open the full advisory

BDU:2025-16471 (CVE-2025-41738)

Vulnerability from fstec – Published: 2025-12-30 – Updated: 2025-12-30 – View on bdu.fstec.ru Fixed

Title

Уязвимость компонента визуализации CmpVisuServer программного комплекса промышленной автоматизации CODESYS, позволяющая злоумышленнику вызвать отказ в обслуживании

Summary

Уязвимость компонента визуализации CmpVisuServer программного комплекса промышленной автоматизации CODESYS связана с ошибками преобразования типов данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

7.5 (High) CVSS 3.1


                      
                        CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-843 - Доступ к ресурсу через несовместимые типы

Aliases

CVE-2025-41738

References

3 references

URL
https://api-www.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to…
https://certvde.com/de/advisories/VDE-2025-100
https://store.codesys.com/en/codesys.html

Impacted products

17 products from 1 vendor

Vendors

CODESYS GmbH

Products

CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS HMI (SL), CODESYS Remote Target Visu Toolkit, CODESYS Runtime Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Virtual Control SL

Versions

от 3.5.18.0 до 3.5.21.40 (CODESYS Control RTE (SL)), от 3.5.18.0 до 3.5.21.40 (CODESYS Control RTE (for Beckhoff CX) SL), от 3.5.18.0 до 3.5.21.40 (CODESYS Control Win (SL)), от 3.5.18.0 до 3.5.21.40 (CODESYS HMI (SL)), от 3.5.18.0 до 3.5.21.40 (CODESYS Remote Target Visu Toolkit), от 3.5.18.0 до 3.5.21.40 (CODESYS Runtime Toolkit), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for BeagleBone SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for emPC-A/iMX6 SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for IOT2000 SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for Linux ARM SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for Linux SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for PFC100 SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for PFC200 SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for PLCnext SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for Raspberry Pi SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Control for WAGO Touch Panels 600 SL), от 4.5.0.0 до 4.19.0.0 (CODESYS Virtual Control SL)

Product types

Industrial control system software, ПО программно-аппаратного средства АСУ ТП, Средство АСУ ТП

Mitigations

Использование рекомендаций: https://api-www.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to-Date/Security/Security-Advisories/Advisory2025-10_CDS-94939.pdf

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "CODESYS GmbH",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS Control RTE (SL)), \u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS Control RTE (for Beckhoff CX) SL), \u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS Control Win (SL)), \u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS HMI (SL)), \u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS Remote Target Visu Toolkit), \u043e\u0442 3.5.18.0 \u0434\u043e 3.5.21.40 (CODESYS Runtime Toolkit), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for BeagleBone SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for emPC-A/iMX6 SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for IOT2000 SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for Linux ARM SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for Linux SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for PFC100 SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for PFC200 SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for PLCnext SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for Raspberry Pi SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Control for WAGO Touch Panels 600 SL), \u043e\u0442 4.5.0.0 \u0434\u043e 4.19.0.0 (CODESYS Virtual Control SL)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439: \nhttps://api-www.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to-Date/Security/Security-Advisories/Advisory2025-10_CDS-94939.pdf",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "01.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "30.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "30.12.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-16471",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-41738",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control Win (SL), CODESYS HMI (SL), CODESYS Remote Target Visu Toolkit, CODESYS Runtime Toolkit, CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Virtual Control SL",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CmpVisuServer \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 CODESYS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b (CWE-843)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 CmpVisuServer \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 CODESYS \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://api-www.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to-Date/Security/Security-Advisories/Advisory2025-10_CDS-94939.pdf\nhttps://certvde.com/de/advisories/VDE-2025-100\nhttps://store.codesys.com/en/codesys.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0410\u0421\u0423 \u0422\u041f, \u0421\u0440\u0435\u0434\u0441\u0442\u0432\u043e \u0410\u0421\u0423 \u0422\u041f",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-843",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)"
}

FKIE_CVE-2025-41738

Vulnerability from fkie_nvd - Published: 2025-12-01 10:16 - Updated: 2026-06-17 09:23

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	info@cert.vde.com	https://certvde.com/de/advisories/VDE-2025-100	Third Party Advisory

Impacted products

Vendor	Product	Version
codesys	control_for_beaglebone_sl	*
codesys	control_for_empc-a\/imx6_sl	*
codesys	control_for_iot2000_sl	*
codesys	control_for_linux_arm_sl	*
codesys	control_for_linux_sl	*
codesys	control_for_pfc100_sl	*
codesys	control_for_pfc200_sl	*
codesys	control_for_plcnext_sl	*
codesys	control_for_raspberry_pi_sl	*
codesys	control_for_wago_touch_panels_600_sl	*
codesys	control_rte_sl	*
codesys	control_rte_sl_\(for_beckhoff_cx\)	*
codesys	control_win_sl	*
codesys	hmi_sl	*
codesys	remote_target_visu	*
codesys	runtime_toolkit	*
codesys	virtual_control_sl	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Remote Target Visu",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "3.5.21.40",
              "status": "affected",
              "version": "3.5.18.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux ARM SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Virtual Control SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "4.19.0.0",
              "status": "affected",
              "version": "4.5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "info@cert.vde.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC30C449-D8D5-4789-875B-770BA22CB50A",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A00DF2DC-04B9-498C-9AF0-1205A45A104C",
              "versionEndIncluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C245753D-52F6-4B11-8724-8DC05C7149F7",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B16CF88-9B70-4B28-92AB-F5CD49ADE513",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D4B874C-2402-4208-85B8-EBC03D092678",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0B3369D-A9E4-4362-8A2B-947C6B89C4A6",
              "versionEndIncluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA58388A-4084-47CB-8078-2B3405DA3D95",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "15F6992D-80C0-43FE-AFD3-241F1F44B078",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F9F69C3-3C0A-4D08-94EE-C9FFD21FD89E",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "53BE2A4B-940C-499C-854F-CD8B99FD4EB5",
              "versionEndIncluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E36769BE-B465-450C-B584-075E969CE608",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_sl_\\(for_beckhoff_cx\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8CCA570-A3CE-46CF-BBD1-384DFBD8DA4C",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "827EB8A7-01B0-4414-A20C-6B2FABF9E384",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "897A1436-7A4E-4AF2-8A62-77DA592321F8",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:remote_target_visu:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E7C54E1-5F4B-4436-BEF7-F86EB783D1F1",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5DC5E0B-5D9A-4A6D-8894-97EF707151EF",
              "versionEndExcluding": "3.5.21.40",
              "versionStartIncluding": "3.5.18.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:virtual_control_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "492FCFE5-1A20-494D-A872-A5FAF463EE30",
              "versionEndExcluding": "4.19.0.0",
              "versionStartIncluding": "4.5.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition."
    }
  ],
  "id": "CVE-2025-41738",
  "lastModified": "2026-06-17T09:23:03.883",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "info@cert.vde.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-41738",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-12-01T13:59:44.375519Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-12-01T10:16:01.130",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://certvde.com/de/advisories/VDE-2025-100"
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-843"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Secondary"
    }
  ]
}

GHSA-7PVJ-RP26-VXXC

Vulnerability from github – Published: 2025-12-01 12:30 – Updated: 2025-12-01 12:30

Details

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-41738"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-843"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-01T10:16:01Z",
    "severity": "HIGH"
  },
  "details": "An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.",
  "id": "GHSA-7pvj-rp26-vxxc",
  "modified": "2025-12-01T12:30:28Z",
  "published": "2025-12-01T12:30:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-41738"
    },
    {
      "type": "WEB",
      "url": "https://certvde.com/de/advisories/VDE-2025-100"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

VDE-2025-081

Vulnerability from csaf_wagogmbhcokg - Published: 2026-10-01 10:00 - Updated: 2026-10-01 10:00

Summary

WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE

Severity

High

Scope

3 vulnerabilities in this advisory, including CVE-2025-41738.

CVE-2025-41738

8.3 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Fixed: 22 products Known affected: 22 products

Open the full advisory

WID-SEC-W-2025-2700

Vulnerability from csaf_certbund - Published: 2025-11-30 23:00 - Updated: 2025-12-01 23:00

Summary

CODESYS Control und Development System: Mehrere Schwachstellen

Severity

Mittel

Scope

3 vulnerabilities in this advisory, including CVE-2025-41738.

CVE-2025-41738

Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2025-41738 (GCVE-0-2025-41738)

3ADR011565

ADVISORY2025-10_VDE-2025-100

BDU:2025-16471 (CVE-2025-41738)

FKIE_CVE-2025-41738

GHSA-7PVJ-RP26-VXXC

VDE-2025-081

WID-SEC-W-2025-2700

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour