CVE-2025-41658: falha de média gravidade em CODESYS Runtime Toolkit
CODESYS Toolkit Exposes Sensitive Files via Default Permissions
Publicada em
Seguir esta CVE+ Monitorar CODESYS Control for BeagleBone SL+ Monitorar CODESYS Control for emPC-A/iMX6 SL
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.5epss 0.1%
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
CODESYS · Control for BeagleBone SLCODESYS · Control for emPC-A/iMX6 SLCODESYS · Control for IOT2000 SLCODESYS · Control for Linux ARM SLCODESYS · Control for Linux SLCODESYS · Control for PFC100 SLCODESYS · Control for PFC200 SLCODESYS · Control for PLCnext SLCODESYS · Control for Raspberry Pi SLCODESYS · Control for WAGO Touch Panels 600 SLCODESYS · Runtime ToolkitCODESYS · Virtual Control SLCVEs relacionadas — CODESYS Runtime Toolkit
No mesmo produto, das mais perigosas para as menos.
CVE-2022-4224HIGHCODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3EPSS 0.9%CVE-2025-41691HIGHCODESYS Control DoS via Unauthenticated NULL Pointer DereferenceEPSS 0.6%CVE-2025-41659HIGHCODESYS Control PKI Exposure Enables Remote Certificate AccessEPSS 0.2%CVE-2026-79625HIGHImproper Synchronization in Monitoring in CODESYS Control RuntimeEPSS 0.2%