5.9
Moyenne
CVE-2025-41739 An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the…
Description
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS PLCHandler 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Remote Target Visu 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Runtime Toolkit 3.5 | 3.5.21.0 → < 3.5.21.40 | 3.5.21.40 |
| CODESYS Control for BeagleBone SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for emPC-A/iMX6 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for IOT2000 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Linux ARM SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Linux SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for PFC100 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
Afficher les 7 autres branches Masquer les 7 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS Control for PFC200 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for PLCnext SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for Raspberry Pi SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Control for WAGO Touch Panels 600 SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Edge Gateway for Linux 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS TargetVisu for Linux SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
| CODESYS Virtual Control SL 4.15 | 4.15.0.0 → < 4.19.0.0 | 4.19.0.0 |
Références
- certvde.com certvde.com
Chronologie
- Publiée
- Dernière modification