CODESYS Control V3 - Untrusted boot application

[Advisory2026-02_VDE-2026-011] The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups. While only the privileged Administrators and Developer groups are intended to load or debug applications on the controller, users in the restricted Service group are allowed to perform maintenance operations, including explicitly replacing the boot application. In addition to access control, the CODESYS Control runtime system includes an optional application…

Číst originál na CERT@VDE →

18. 6. 2026 12:00 CZ · EN/orig

CODESYS DE

tg: zranitelnost tp: průmyslové systémy

CVE v události 1

CVE	hodnocení	KEV	EPSS
CVE-2025-41660	8.8 3.1 · CERTVDE	–	0.00

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE.