CVE-2025-41660

CODESYS Control Boot Application Replacement Enables Code Execution

State: Published
Severity: 8.8 High
Published: Mar 24, 2026
Updated: Mar 24, 2026
Reserved: Apr 16, 2025

Description

A low-privileged remote attacker may be able to replace the boot application of the CODESYS Control runtime system, enabling unauthorized code execution.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-669 Incorrect Resource Transfer Between Spheres

Affected Products

Product	Versions
CODESYS Control RTE (SL)CODESYS	0.0.0 to before 3.5.22.0Affected
CODESYS Control RTE (for Beckhoff CX) SLCODESYS	0.0.0 to before 3.5.22.0Affected
CODESYS Control Win (SL)CODESYS	0.0.0 to before 3.5.22.0Affected
CODESYS HMI (SL)CODESYS	0.0.0 to before 3.5.22.0Affected
CODESYS Runtime ToolkitCODESYS	0.0.0 to before 3.5.22.0Affected
CODESYS Control for BeagleBone SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for emPC-A/iMX6 SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for IOT2000 SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for Linux ARM SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for Linux SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for PFC100 SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for PFC200 SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for PLCnext SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for Raspberry Pi SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Control for WAGO Touch Panels 600 SLCODESYS	0.0.0 to before 4.21.0.0Affected
CODESYS Virtual Control SLCODESYS	0.0.0 to before 4.21.0.0Affected

References

https://certvde.com/de/advisories/VDE-2026-011

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.