KEB PSIRT (CSAF)
advisoryDEkeb_psirt
KEB PSIRT CSAF 2.0 advisories (hosted by CERT@VDE).
01
advisories (1)
Vendor and ecosystem advisories describing this.
02
product assertions (2)
Products and version ranges known to be affected.
03
CVE links (4)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-41739US | — | — | ||
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an… | ||||
| CVE-2025-41738US | — | — | ||
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading t… | ||||
| CVE-2025-41691US | — | — | ||
An unauthenticated remote attacker may trigger a NULL pointer dereference in the affected CODESYS Control runtime systems by sending specially crafted communication requests, poten… | ||||
| CVE-2025-41659US | — | — | ||
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to… | ||||