CVE-2025-41739: falha de média gravidade em CODESYS Control for BeagleBone SL
CODESYS Control - Linux/QNX SysSocket flaw
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar CODESYS Control for BeagleBone SL+ Monitorar CODESYS Control for emPC-A/iMX6 SL
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.9epss 0.4%
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
CODESYS · CODESYS Control for BeagleBone SLCODESYS · CODESYS Control for emPC-A/iMX6 SLCODESYS · CODESYS Control for IOT2000 SLCODESYS · CODESYS Control for Linux ARM SLCODESYS · CODESYS Control for Linux SLCODESYS · CODESYS Control for PFC100 SLCODESYS · CODESYS Control for PFC200 SLCODESYS · CODESYS Control for PLCnext SLCODESYS · CODESYS Control for Raspberry Pi SLCODESYS · CODESYS Control for WAGO Touch Panels 600 SLCODESYS · CODESYS Edge Gateway for LinuxCODESYS · CODESYS PLCHandlerCODESYS · CODESYS Remote Target VisuCODESYS · CODESYS Runtime ToolkitCODESYS · CODESYS TargetVisu for Linux SLCODESYS · CODESYS Virtual Control SLCVEs relacionadas — CODESYS Control for BeagleBone SL
No mesmo produto, das mais perigosas para as menos.
CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2022-47391HIGHCODESYS: Multiple products prone to Improper Input ValidationEPSS 1.9%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.7%CVE-2022-22517HIGHCommunication Components in multiple CODESYS products vulnerable to communication channel disruptionEPSS 1.5%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%