Vulnerabilidades de CODESYS Control for Linux ARM SL (CVE)

Registros CVE publicados para CODESYS Control for Linux ARM SL, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

5 resultados
8.1Alta
CVE-2026-79625

Improper Synchronization in Monitoring in CODESYS Control Runtime

CODESYS Control RTE (SL); CODESYS Control RTE (for Beckhoff CX) SL; CODESYS Control Win (SL); CODESYS Runtime Toolkit

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacke…

7.5Alta
CVE-2025-41738

CODESYS Control - Invalid type usage in visualization

CODESYS CODESYS Control RTE (SL); CODESYS CODESYS Control RTE (for Beckhoff CX) SL; CODESYS CODESYS Control Win (SL); CODESYS CODESYS HMI (SL)

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

7.5Alta
CVE-2025-41691

CODESYS Control DoS via Unauthenticated NULL Pointer Dereference

CODESYS Control RTE (SL); CODESYS Control RTE (for Beckhoff CX) SL; CODESYS Control Win (SL); CODESYS HMI (SL)

An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, potentially leading to a denial-of-service (DoS) condition.

8.3Alta
CVE-2025-41659

CODESYS Control PKI Exposure Enables Remote Certificate Access

CODESYS Control RTE (SL); CODESYS Control RTE (for Beckhoff CX) SL; CODESYS Control Win (SL); CODESYS HMI (SL)

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain…