CODESYS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 8.8
  CVE-2025-41660

  CODESYS Control Boot Application Replacement Enables Code Execution

  A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.

  CODESYS CODESYS Control for Linux SL CODESYS Control for PFC200 SL CODESYS Control for Raspberry Pi SL Linux ICS / OT
  Mar 24, 2026
• High 7.5
  CVE-2026-3509

  CODESYS Control Audit Log Format String DoS

  An unauthenticated remote attacker may be able to control the format string of messages processed by the Audit Log of the CODESYS Control runtime system, potentially resulting in a denial‑of‑service (DoS) condition.

  CODESYS CODESYS Control for BeagleBone SL CODESYS Control for WAGO Touch Panels 600 SL CODESYS Control for IOT2000 SL Linux ICS / OT
  Mar 24, 2026

Revision history

1. 2026-03-24 #2

   Referenz(en) aufgenommen: EUVD-2026-14784, EUVD-2025-208957

2. 2026-03-23 #1

   Initiale Fassung

References

• VDECERT Advisory vom 2026-03-23
  https://certvde.com/de/advisories/VDE-2026-011/
• VDECERT Advisory vom 2026-03-23
  https://certvde.com/de/advisories/VDE-2026-018/