high7.5
CVE-2025-41738
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, …
Impact
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | from 4.5.0.0 through 4.19.0.0 |
| Codesys | Control For Iot2000 Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Linux Arm Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Linux Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Pfc100 Sl | from 4.5.0.0 through 4.19.0.0 |
| Codesys | Control For Pfc200 Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Plcnext Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Raspberry Pi Sl | from 4.5.0.0 before 4.19.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | from 4.5.0.0 through 4.19.0.0 |
| Codesys | Control Rte Sl | from 3.5.18.0 before 3.5.21.40 |
| Codesys | Control Rte Sl \(For Beckhoff Cx\) | from 3.5.18.0 before 3.5.21.40 |