← CVE Intelligence

CVE-2025-41738

CODESYS Control - Invalid type usage in visualization PUBLISHED

Description (CNA)

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Control RTE (SL)affected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS Control RTE (for Beckhoff CX) SLaffected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS Control Win (SL)affected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS HMI (SL)affected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS Remote Target Visuaffected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS Runtime Toolkitaffected 3.5.18.0 before 3.5.21.40
CODESYS / CODESYS Control for BeagleBone SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for emPC-A/iMX6 SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for IOT2000 SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for Linux ARM SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for Linux SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for PFC100 SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for PFC200 SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for PLCnext SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for Raspberry Pi SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Control for WAGO Touch Panels 600 SLaffected 4.5.0.0 before 4.19.0.0
CODESYS / CODESYS Virtual Control SLaffected 4.5.0.0 before 4.19.0.0

CWE

CWE-843

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.