CVE-2026-35225

Summary of CVE-2026-35225 (CODESYS EtherNet/IP adapter stack) : An unauthenticated remote attacker can exhaust all TCP connections, preventing legitimate clients from establishing new connections. Root cause cited in reports is improper timeout handling during connection management. Impact stated...

CVE-2026-35225 Improper timeout handling in CODESYS EtherNetIP

An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections...

CODESYS EtherNetIP code-related vulnerabilities

CODESYS EtherNetIP is an Ethernet-based industrial protocol developed by the German company CODESYS. There is a code vulnerability in CODESYS EtherNetIP, which stems from exhausting all available TCP connections. This vulnerability could allow unauthorized remote attackers to prevent legitimate...

CVE-2021-36765: NULL Pointer Dereference

In CODESYS EtherNetIP before 4.1.0.0, specific EtherNet/IP requests may cause a null pointer dereference in the downloaded vulnerable EtherNet/IP stack that is executed by the CODESYS Control runtime system...

PT-2021-21344

Name of the Vulnerable Software and Affected Versions CODESYS EtherNetIP versions prior to 4.1.0.0 Description The issue is caused by specific EtherNet/IP requests that may lead to a null pointer dereference in the downloaded vulnerable EtherNet/IP stack executed by the CODESYS Control runtime...

CODESYS EtherNetIP code-related vulnerabilities

CODESYS EtherNetIP is an open standard promoted and maintained by ODVA ®, a user organization of 3S-Smart Software Solutions, Germany. A code issue exists in CODESYS EtherNetIP due to a null pointer dereference issue in the product stack. The following products and versions are affected: CODESYS...