Description
An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS Edge Gateway | < 3.5.21.0 | 3.5.21.0 |
| CODESYS | CODESYS Gateway for Windows | < 3.5.21.0 | 3.5.21.0 |
Advisories 4
- ICSA-26-132-04 ABB Automation Builder Gateway for Windows CISA ICS & IT advisories · May 12, 2026
- 3ADR011525 ABB Automation Builder Gateway for Windows with insecure defaults ABB PSIRT · Feb 24, 2026
- ADVISORY2025-02_VDE-2025-013 CODESYS (Edge) Gateway for Windows insecure default CERT@VDE · Jun 5, 2025
- WID-SEC-2025-0583 CODESYS Gateway: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Mar 17, 2025