ifm: Multiple Vulnerabilities in CR3171
The Firmware installed on the CR3171 is impacted by various CODESYS vulnerabilities.
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-41691US | — | — | ||
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, poten… | ||||
| CVE-2025-41659US | — | — | ||
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to… | ||||
| CVE-2025-41658US | —OT erhöht | — | ||
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.1 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- MitigationFirmware 3.2 installed on CR3171
deactivate CodeSys enviroment on device
- BehobenFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - BehobenFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - BehobenFirmware 3.1 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - BehobenFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - BehobenFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents - BehobenFirmware 3.2 installed on CR3171
will be fixed in Firmware Version 3.3
https://www.ifm.com/de/en/product/CR3171#documents
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan