CVE-2025-2595

Forced Browsing Vulnerability in CODESYS Visualization PUBLISHED

Description (CNA)

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Visualization	affected 0.0.0.0 before 4.8.0.0

CWE

CWE-425

References

https://certvde.com/en/advisories/VDE-2025-027

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.