ifm: Multiple Vulnerabilities in CR3171
The Firmware installed on the CR3171 is impacted by various CODESYS vulnerabilities.
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41691US | — | — | ||
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, poten… | ||||
| CVE-2025-41659US | — | — | ||
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to… | ||||
| CVE-2025-41658US | —OT elevated | — | ||
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions. | ||||
references
External citations — patches, advisories, analysis.
remediations (12)
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- FixedFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - FixedFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - FixedFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - FixedFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - FixedFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - FixedFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan