KEB Automation: Multiple Vulnerabilities in COMBIVIS Control Runtime
view advisory published 2026-10-08
The Docker-based COMBIVIS Control Runtime service is affected by several vulnerabilities in CODESYS Runtime Toolkit 3.5.21.10. These vulnerabilities are resolved in COMBIVIS Control Runtime 2.1.0.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41739US | — | — | ||
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an… | ||||
| CVE-2025-41738US | — | — | ||
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading t… | ||||
| CVE-2025-41691US | — | — | ||
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, poten… | ||||
| CVE-2025-41659US | — | — | ||
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- FixedCOMBIVIS Control Runtime
Update the COMBIVIS Control Runtime service to version 2.1.0.
- FixedCOMBIVIS Control Runtime
Update the COMBIVIS Control Runtime service to version 2.1.0.
- FixedCOMBIVIS Control Runtime
Update the COMBIVIS Control Runtime service to version 2.1.0.
- FixedCOMBIVIS Control Runtime
Update the COMBIVIS Control Runtime service to version 2.1.0.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan