CVE-2025-1468

CODESYS Control V3 - OPC UA Server Authentication bypass PUBLISHED

Description (CNA)

An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Runtime Toolkit	affected 0 before 3.5.21.0

CWE

CWE-203

References

https://cert.vde.com/en/advisories/VDE-2025-022

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.