CODESYS PROFINET Controller - Out-of-bounds Write
CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems. The vulnerability in the CODESYS PROFINET Controller is caused by an out‑of‑bounds write during the processing of received invalid PROFINET communication data. Triggering this condition causes the CODESYS Control runtime system to handle the resulting exception and stop the affected PLC application in a controlled manner. Remote code execution is not considered feasible, as the execution flow remains controlled. This issue affects only CODESYS projects that include a PROFINET Controller configuration.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-35226US | — | — | ||
An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data… | ||||
references
External citations — patches, advisories, analysis.
- Advisory2026-06_VDE-2026-041: CODESYS PROFINET Controller - Out-of-bounds Write - PDFself
- Advisory2026-06_VDE-2026-041: CODESYS PROFINET Controller - Out-of-bounds Write - CSAFself
- Advisory2026-06_VDE-2026-041: CODESYS PROFINET Controller - Out-of-bounds Write - HTMLself
- CERT@VDE Security Advisories for CODESYS GmbHexternal
- CODESYS Security Advisoriesexternal
remediations (1)
- FixedCODESYS PROFINET
Update the following product to version 4.8.0.0. * CODESYS PROFINET To make the fix effective for existing CODESYS projects, you must additionally update the PROFINET Controller in the device tree to the latest version and perform a download of the CODESYS application to the PLC. The CODESYS Development System and the products available as CODESYS add-ons can be downloaded and installed directly with the CODESYS Installer or be downloaded from the CODESYS Store. Alternatively, as well as for all other products, you will find further information on obtaining the software update in the CODESYS Update area https://www.codesys.com/download/.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan