7.5High
CVE-2025-1468CODESYS Control V3 - OPC UA Server Authentication bypass
Description
An unauthenticated remote attacker can gain access to sensitive information including authentication information when using CODESYS OPC UA Server with the non-default Basic128Rsa15 security policy.
Weakness (CWE):
CWE-203
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| CODESYS | CODESYS Runtime Toolkit | < 3.5.21.0 |