← Database
CVE-2025-41738
HIGH
CVSS: 7.5
Published: 2025-12-01
Modified: 2026-06-17
Description
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Affected Platforms
Codesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Empc-A\/Imx6 SlCodesys Control Rte Sl \(For Beckhoff Cx\)Codesys Control For Wago Touch Panels 600 SlCodesys Virtual Control SlCodesys Hmi SlCodesys Runtime ToolkitCodesys Control For Pfc200 SlCodesys Control For Pfc100 Sl