8.7
High
CVE-2026-35225 An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter…
Description
An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS EtherNetIP 1.0 | 1.0.0.0 → < 4.9.0.0 | 4.9.0.0 |