Description
In CODESYS Gateway V3 before 3.5.17.10, there is a NULL Pointer Dereference. Crafted communication requests may cause a Null pointer dereference in the affected CODESYS products and may result in a denial-of-service condition.
Advisories 7
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- ICSA-25-273-04 Festo Controller CECC-S,-LK,-D Family Firmware (Update A) CISA ICS & IT advisories · Nov 13, 2025
- FSA-202202 Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system CERT@VDE · Nov 3, 2025
- FSA-202203 Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system CERT@VDE · Jul 10, 2025
- VDE-2021-061 Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities CERT@VDE · Apr 26, 2022
- VDE-2021-054 Pilz: Multiple vulnerabilities in CODESYS V2 and V3 runtime system CERT@VDE · Apr 26, 2022