CVE-2024-41975
Medium
Description
An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
SeverityMedium
CVSS5.3
Exploit probability—
ProductCODESYS Edge Gateway
PublishedMar 18, 2025
First seenMar 18, 2025
Weakness typeCWE-1188CWE-1188
How to fix
Update
- CODESYS CODESYS Edge Gateway3.5.21.0 or later
- CODESYS CODESYS Gateway for Windows3.5.21.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS CODESYS Edge Gateway | v < 3.5.21.0 | 3.5.21.0 |
| CODESYS CODESYS Gateway for Windows | v < 3.5.21.0 | 3.5.21.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.