Aller au contenu
Se connecter
7.5 Élevée

CVE-2025-41691 An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime…

Description

An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.

Produits et versions touchés

Produit Versions touchées Corrigé en
Control RTE (SL) 3.5 3.5.21.10 → < 3.5.21.20 3.5.21.20
Control RTE (for Beckhoff CX) SL 3.5 3.5.21.10 → < 3.5.21.20 3.5.21.20
Control Win (SL) 3.5 3.5.21.10 → < 3.5.21.20 3.5.21.20
HMI (SL) 3.5 3.5.21.10 → < 3.5.21.20 3.5.21.20
Control for BeagleBone SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for emPC-A/iMX6 SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for IOT2000 SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for Linux ARM SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for Linux SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Afficher les 6 autres branches
Produit Versions touchées Corrigé en
Control for PFC100 SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for PFC200 SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for PLCnext SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for Raspberry Pi SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Control for WAGO Touch Panels 600 SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0
Virtual Control SL 4.16 4.16.0.0 → < 4.17.0.0 4.17.0.0

Autres CVE de Control RTE (SL)

Les 4 CVE de Control RTE (SL) →
CVE-2026-79625 Affected products do not properly synchronize access to their monitoring functionality 7.2 Élevée CVE-2025-41659 A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and… 8.3 Élevée CVE-2022-4224 In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to… 8.8 Élevée
Suivre cette CVE