← CVE Intelligence

CVE-2025-41700

CODESYS Development System - Deserialization of Untrusted Data PUBLISHED

Description (CNA)

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Development Systemaffected 0.0.0 before 3.5.21.40

CWE

CWE-502

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.