5.3Medium
CVE-2024-41975CODESYS (Edge) Gateway for Windows insecure default
Description
An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
Weakness (CWE):
CWE-1188
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| CODESYS | CODESYS Edge Gateway | < 3.5.21.0 | |
| CODESYS | CODESYS Gateway for Windows | < 3.5.21.0 |