CODESYS EtherNetIP - Improper timeout handling

[Advisory2026-04_VDE-2026-040] CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the generated application code. When an EtherNet/IP adapter is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems. Under certain non‑standard operating…

Číst originál na CERT@VDE →

13. 7. 2026 12:00 CZ · EN/orig

CODESYS DE

tg: zranitelnost tp: průmyslové systémy

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2026-35225	8.7 4.0 · CERTVDE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.