Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2025-41738
Analyzed
More InfoOfficial Page
Source-info@cert.vde.com
View Known Exploited Vulnerability (KEV) details
Published At-01 Dec, 2025 | 10:16
Updated At-23 Feb, 2026 | 15:42

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.17.5HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Type: Secondary
Version: 3.1
Base score: 7.5
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CPE Matches
CODESYS GmbH
codesys
>>control_for_beaglebone_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_empc-a\/imx6_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(inclusive)
cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_iot2000_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_linux_arm_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_linux_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_pfc100_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(inclusive)
cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_pfc200_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_plcnext_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_raspberry_pi_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_for_wago_touch_panels_600_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(inclusive)
cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_rte_sl>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_rte_sl_\(for_beckhoff_cx\)>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>control_win_sl>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>hmi_sl>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>remote_target_visu>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:remote_target_visu:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>runtime_toolkit>>Versions from 3.5.18.0(inclusive) to 3.5.21.40(exclusive)
cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*
CODESYS GmbH
codesys
>>virtual_control_sl>>Versions from 4.5.0.0(inclusive) to 4.19.0.0(exclusive)
cpe:2.3:a:codesys:virtual_control_sl:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-843Secondaryinfo@cert.vde.com
CWE ID: CWE-843
Type: Secondary
Source: info@cert.vde.com
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://certvde.com/de/advisories/VDE-2025-100info@cert.vde.com
Third Party Advisory
Hyperlink: https://certvde.com/de/advisories/VDE-2025-100
Source: info@cert.vde.com
Resource:
Third Party Advisory
Change History
0Changes found
Details not found