CODESYS Control PKI Exposure Enables Remote Certificate Access

8.3 CVSS

Vulnerability Description

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted communication is possible if the certificates are deleted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-41659

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Luca Borzacchiello from Nozomi Networks

References

https://certvde.com/de/advisories/VDE-2025-051

More from CODESYS

View All →

CVE-2025-41739

CODESYS Control - Linux/QNX SysSocket flaw

Medium 5.9

CVE-2025-41738

CODESYS Control - Invalid type usage in visualization

High 7.5

CVE-2025-41700

CODESYS Development System - Deserialization of Untrusted Data

High 7.8

CVE-2025-41691

CODESYS Control DoS via Unauthenticated NULL Pointer Dereference

High 7.5

CVE-2025-41660

CODESYS Control Boot Application Replacement Enables Code Execution

High 8.8

Affected Vendor

CODESYS

View all reports →

Affected Software

Control RTE (SL), Control RTE (for Beckhoff CX) SL, Control Win (SL), HMI (SL), Runtime Toolkit, Control for BeagleBone SL, Control for emPC-A/iMX6 SL, Control for IOT2000 SL, Control for Linux ARM SL, Control for Linux SL, Control for PFC100 SL, Control for PFC200 SL, Control for PLCnext SL, Control for Raspberry Pi SL, Control for WAGO Touch Panels 600 SL, Virtual Control SL

Vulnerable Versions:

0.0.0.0