Description
An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CODESYS | CODESYS EtherNetIP | 1.0.0.0 – < 4.9.0.0 | 4.9.0.0 |
Advisories 1
- ADVISORY2026-04_VDE-2026-040 CODESYS EtherNetIP - Improper timeout handling CERT@VDE · Jul 13, 2026