Description
An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS Visualization | 0.0.0.0 – < 4.8.0.0 | 4.8.0.0 |
Advisories 7
- ICSA-26-132-03 ABB AC500 V3 Multiple Vulnerabilities CISA ICS & IT advisories · May 12, 2026
- ICSA-26-076-01 CODESYS in Festo Automation Suite CISA ICS & IT advisories · Mar 17, 2026
- FSA-202601 Several CODESYS vulnerabilities in Festo Automation Suite CERT@VDE · Feb 26, 2026
- 3ADR011524 AC500 V3 Multiple vulnerabilities ABB PSIRT · Feb 24, 2026
- VDE-2025-062 WAGO: Multiple Vulnerabilities in CODESYS components CERT@VDE · Nov 3, 2025
- ADVISORY2025-05_VDE-2025-027 CODESYS Visualization user management bypass in WebVisu CERT@VDE · Apr 23, 2025
- WID-SEC-2025-0871 CODESYS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Apr 22, 2025