CVE-2024-41975 - CVE House
Back to Database
Status published Medium CVE-2024-41975

CODESYS (Edge) Gateway for Windows insecure default

Vulnerability Description

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41975

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Diego Guibertoni from Nozomi Networks

References

More from CODESYS

View All →
CVE-2025-41739
CODESYS Control - Linux/QNX SysSocket flaw
Medium 5.9
CVE-2025-41738
CODESYS Control - Invalid type usage in visualization
High 7.5
CVE-2025-41700
CODESYS Development System - Deserialization of Untrusted Data
High 7.8
CVE-2025-41691
CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
High 7.5
CVE-2025-41660
CODESYS Control Boot Application Replacement Enables Code Execution
High 8.8

Affected Vendor

Affected Software

CODESYS Edge Gateway, CODESYS Gateway for Windows
Vulnerable Versions:
0

Timeline

Official Publish: March 18th, 2025
Last Modified: March 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-1188

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.