High 3ADR011565 1 CVE

AC500 V3 - Invalid type usage in visualization

Published Sep 28, 2026 · Updated Sep 28, 2026

Vendor: ABB Product: AC500 V3 Firmware Product: PM5xxx

Summary

An update is available that resolves publicly reported vulnerability in the products versions listed as affected in the advisory.

An attacker who successfully exploited these vulnerabilities could cause a denial-of-service (DoS).

Vulnerabilities 1

High 7.5

CVE-2025-41738

CODESYS Control - Invalid type usage in visualization

An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.

CODESYS CODESYS Control for PFC200 SL CODESYS Control for Raspberry Pi SL CODESYS Control for emPC-A/iMX6 SL Linux ICS / OT

Dec 1, 2025

Revision history

2026-09-28 #1
Initial version.

References

ABB CYBERSECURITY ADVISORY - PDF Version
https://search.abb.com/library/Download.aspx?DocumentID=3ADR011565&LanguageCode=en&DocumentPartId=&Action=Launch
2025-10: CODESYS Control - Invalid type usage in visualization
https://api-de.codesys.com/fileadmin/user_upload/CODESYS_Group/Ecosystem/Up-to-Date/Security/Security-Advisories/Advisory2025-10_CDS-94939.pdf