High severity7.5NVD Advisory· Published Dec 1, 2025· Updated Jun 17, 2026
CVE-2025-41738
CVE-2025-41738
Description
An unauthenticated remote attacker may cause the visualisation server of the CODESYS Control runtime system to access a resource with a pointer of wrong type, potentially leading to a denial-of-service (DoS) condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<4.19.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<=4.19.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: >=4.5.0.0,<4.19.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: >=4.5.0.0,<4.19.0.0
- cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<4.19.0.0
- cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<4.19.0.0
- cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<=4.19.0.0
- cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<4.19.0.0
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*range: >=4.5.0.0,<4.19.0.0
- (no CPE)range: 4.5.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<=4.19.0.0
- cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*Range: >=3.5.18.0,<3.5.21.40
- cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*Range: >=3.5.18.0,<3.5.21.40
- cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*Range: >=3.5.18.0,<3.5.21.40
- cpe:2.3:a:codesys:remote_target_visu:*:*:*:*:*:*:*:*Range: >=3.5.18.0,<3.5.21.40
- cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*Range: >=3.5.18.0,<3.5.21.40
- cpe:2.3:a:codesys:virtual_control_sl:*:*:*:*:*:*:*:*Range: >=4.5.0.0,<4.19.0.0
Patches
Vulnerability mechanics
References
1- certvde.com/de/advisories/VDE-2025-100nvdThird Party Advisory
News mentions
0No linked articles in our index yet.