7.5
High
CVE-2025-41691 An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime…
Description
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Control RTE (SL) 3.5 | 3.5.21.10 → < 3.5.21.20 | 3.5.21.20 |
| Control RTE (for Beckhoff CX) SL 3.5 | 3.5.21.10 → < 3.5.21.20 | 3.5.21.20 |
| Control Win (SL) 3.5 | 3.5.21.10 → < 3.5.21.20 | 3.5.21.20 |
| HMI (SL) 3.5 | 3.5.21.10 → < 3.5.21.20 | 3.5.21.20 |
| Control for BeagleBone SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for emPC-A/iMX6 SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for IOT2000 SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for Linux ARM SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for Linux SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
Show the 6 other branches Hide the 6 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Control for PFC100 SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for PFC200 SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for PLCnext SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for Raspberry Pi SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Control for WAGO Touch Panels 600 SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
| Virtual Control SL 4.16 | 4.16.0.0 → < 4.17.0.0 | 4.17.0.0 |
Other CVEs of Control RTE (SL)
The 4 CVEs of Control RTE (SL) →
CVE-2026-79625
Affected products do not properly synchronize access to their monitoring functionality
7.2
High
CVE-2025-41659
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and…
8.3
High
CVE-2022-4224
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to…
8.8
High