IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
5.9Media

CVE-2025-41739CODESYS Control - Linux/QNX SysSocket flaw

CODESYS CODESYS PLCHandler; CODESYS CODESYS Remote Target Visu; CODESYS CODESYS Runtime Toolkit; CODESYS CODESYS Control for BeagleBone SL Publicada: (hace 11 meses)

Descripción

An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.

Debilidad (CWE): CWE-125

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
CODESYS CODESYS Control for BeagleBone SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for emPC-A/iMX6 SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for IOT2000 SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for Linux ARM SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for Linux SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for PFC100 SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for PFC200 SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for PLCnext SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for Raspberry Pi SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Control for WAGO Touch Panels 600 SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Edge Gateway for Linux 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS PLCHandler 3.5.21.0 – < 3.5.21.40
CODESYS CODESYS Remote Target Visu 3.5.21.0 – < 3.5.21.40
CODESYS CODESYS Runtime Toolkit 3.5.21.0 – < 3.5.21.40
CODESYS CODESYS TargetVisu for Linux SL 4.15.0.0 – < 4.19.0.0
CODESYS CODESYS Virtual Control SL 4.15.0.0 – < 4.19.0.0

Referencias y parches