5.9
Medium
CVE-2025-41739 An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the…
Description
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS PLCHandler 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Remote Target Visu 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Runtime Toolkit 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Control for BeagleBone SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for emPC-A/iMX6 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for IOT2000 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Linux ARM SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Linux SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for PFC100 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Control for PFC200 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for PLCnext SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Raspberry Pi SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for WAGO Touch Panels 600 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Edge Gateway for Linux 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS TargetVisu for Linux SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Virtual Control SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
References
- certvde.com certvde.com
Timeline
- Published
- Last modified