Description
3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server, all versions 3.5.11.0 to 3.5.15.0, allows an attacker to send crafted requests from a trusted OPC UA client that cause a NULL pointer dereference, which may trigger a denial-of-service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GmbH | 3S-Smart Software Solutions GmbH CODESYS V3 OPC UA Server | all versions 3.5.11.0 to 3.5.15.0 | — |
Advisories 5
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- ICSA-25-273-04 Festo Controller CECC-S,-LK,-D Family Firmware (Update A) CISA ICS & IT advisories · Nov 13, 2025
- FSA-202202 Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system CERT@VDE · Nov 3, 2025
- ICSA-19-255-04 3S-Smart Software Solutions GmbH CODESYS Control V3 OPC UA Server CISA ICS & IT advisories · Sep 12, 2019