CVE-2024-41975

CODESYS (Edge) Gateway for Windows insecure default PUBLISHED

Description (CNA)

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Edge Gateway	affected 0 before 3.5.21.0
CODESYS / CODESYS Gateway for Windows	affected 0 before 3.5.21.0

CWE

CWE-1188

References

https://cert.vde.com/en/advisories/VDE-2025-013

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.