Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_remote_target_visu:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys Remote Target Visu (4ab16ad9-c06f-515e-b359-9a74749bd3cd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41739 vulnerable 2026-06-08 07:25:07.925778 CODESYS Control - Linux/QNX SysSocket flaw
MEDIUM (5.9)
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
Published: 2025-12-01T10:00:44.373Z
Updated: 2026-01-07T17:09:52.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-41738 vulnerable 2026-06-08 07:25:07.914835 CODESYS Control - Invalid type usage in visualization
HIGH (7.5)
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
Published: 2025-12-01T10:02:33.407Z
Updated: 2025-12-01T14:00:28.509Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.