Description
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS PLCWinNT | V2 – < V2.4.7.57 | V2.4.7.57 |
| CODESYS | CODESYS Runtime Toolkit 32 bit full | V2 – < V2.4.7.57 | V2.4.7.57 |
Advisories 5
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- ICSA-25-329-05 Festo Compact Vision System, Control Block, Controller, and Operator Unit products CISA ICS & IT advisories · Nov 25, 2025
- FSA-202208 Festo: Multiple Festo products contain an unsafe default Codesys configuration CERT@VDE · Oct 28, 2025
- VDE-2022-040 WAGO: Multiple Vulnerabilities in Controller with WAGO I/O-Pro / CODESYS 2.3 Runtime CERT@VDE · Sep 22, 2023