CVE-2025-41739
Medium
Description
An unauthenticated remote attacker, who beats a race condition, can exploit a flaw in the communication servers of the CODESYS Control runtime system on Linux and QNX to trigger an out-of-bounds read via crafted socket communication, potentially causing a denial of service.
SeverityMedium
CVSS5.9
Exploit probability—
ProductCODESYS PLCHandler
PublishedDec 1, 2025
First seenDec 1, 2025
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- CODESYS CODESYS PLCHandler3.5.21.40 or later
- CODESYS CODESYS Remote Target Visu3.5.21.40 or later
- CODESYS CODESYS Runtime Toolkit3.5.21.40 or later
- CODESYS CODESYS Control for BeagleBone SL4.19.0.0 or later
- CODESYS CODESYS Control for emPC-A/iMX6 SL4.19.0.0 or later
- CODESYS CODESYS Control for IOT2000 SL4.19.0.0 or later
- CODESYS CODESYS Control for Linux ARM SL4.19.0.0 or later
- CODESYS CODESYS Control for Linux SL4.19.0.0 or later
- CODESYS CODESYS Control for PFC100 SL4.19.0.0 or later
- CODESYS CODESYS Control for PFC200 SL4.19.0.0 or later
- CODESYS CODESYS Control for PLCnext SL4.19.0.0 or later
- CODESYS CODESYS Control for Raspberry Pi SL4.19.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS CODESYS PLCHandler | 3.5.21.0 ≤ v < 3.5.21.40 | 3.5.21.40 |
| CODESYS CODESYS Remote Target Visu | 3.5.21.0 ≤ v < 3.5.21.40 | 3.5.21.40 |
| CODESYS CODESYS Runtime Toolkit | 3.5.21.0 ≤ v < 3.5.21.40 | 3.5.21.40 |
| CODESYS CODESYS Control for BeagleBone SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for emPC-A/iMX6 SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for IOT2000 SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for Linux ARM SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for Linux SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for PFC100 SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for PFC200 SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for PLCnext SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for Raspberry Pi SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Control for WAGO Touch Panels 600 SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Edge Gateway for Linux | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS TargetVisu for Linux SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
| CODESYS CODESYS Virtual Control SL | 4.15.0.0 ≤ v < 4.19.0.0 | 4.19.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.