CVE-2025-41691

🗓️ 04 Aug 2025 08:04:34Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 47 Views

Unauthenticated remote attacker may exploit NULL pointer dereference in CODESYS, causing DoS.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	CODESYS Zero Pointer DoS	6 Jan 202600:00	–	bdu_fstec
Circl	CVE-2025-41691	4 Aug 202509:01	–	circl
CNNVD	CODESYS Control code-related vulnerabilities	4 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-41691 CODESYS Control DoS via Unauthenticated NULL Pointer Dereference	4 Aug 202508:04	–	cvelist
EUVD	EUVD-2025-23490	3 Oct 202520:07	–	euvd
ICS	ABB AC500 V3 Multiple Vulnerabilities	24 Feb 202600:30	–	ics
NVD	CVE-2025-41691	4 Aug 202508:15	–	nvd
Positive Technologies	PT-2025-31800 · Codesys · Codesys Control	4 Aug 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-41691: NULL Pointer Dereference	4 Aug 202500:00	–	rapid7
RedhatCVE	CVE-2025-41691	6 Aug 202508:29	–	redhatcve

Vulners

Node

codesys control_rteRange<3.5.21.20

codesys control_rte_slRange<3.5.21.20

codesys control_winRange<3.5.21.20

codesys hmiRange<3.5.21.20

codesys control_for_beaglebone_slRange<4.17.0.0

codesys control_for_empc-a/imx6_slRange<4.17.0.0

codesys control_for_iot2000_slRange<4.17.0.0

codesys control_for_linux_arm_slRange<4.17.0.0

codesys control_for_linux_slRange<4.17.0.0

codesys control_for_pfc100_slRange<4.17.0.0

codesys control_for_pfc200_slRange<4.17.0.0

codesys control_for_plcnext_slRange<4.17.0.0

codesys control_for_raspberry_pi_slRange<4.17.0.0

codesys control_for_wago_touch_panels_600_slRange<4.17.0.0

codesys virtual_control_slRange<4.17.0.0

[
  {
    "defaultStatus": "unaffected",
    "product": "Control RTE (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.21.20",
        "status": "affected",
        "version": "3.5.21.10",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control RTE (for Beckhoff CX) SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.21.20",
        "status": "affected",
        "version": "3.5.21.10",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control Win (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.21.20",
        "status": "affected",
        "version": "3.5.21.10",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "HMI (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "3.5.21.20",
        "status": "affected",
        "version": "3.5.21.10",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for BeagleBone SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for emPC-A/iMX6 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for IOT2000 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for Linux ARM SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for Linux SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for PFC100 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for PFC200 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for PLCnext SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for Raspberry Pi SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Control for WAGO Touch Panels 600 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Virtual Control SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "4.17.0.0",
        "status": "affected",
        "version": "4.16.0.0",
        "versionType": "semver"
      }
    ]
  }
]