VDB

BDU%3A2026-00082

BDU%3A2026-00082 PUBLISHED CVSS 7.5 HIGH

Уязвимость программных продуктов CODESYS, связанная с разыменованием нулевого указателя, позволяющая нарушителю вызвать отказ в обслуживании

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
CODESYSControl for IOT2000 SL4.16.0.0
CODESYSControl for Linux SL4.16.0.0
CODESYSVirtual Control SL4.16.0.0
CODESYS GmbHCODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux ARM SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control Win (SL), CODESYS Control RTE (SL), CODESYS Control RTE (for Beckhoff CX) SL, CODESYS HMI (SL), CODESYS Virtual Control SL
CODESYSHMI (SL)3.5.21.10
CODESYSControl for Raspberry Pi SL4.16.0.0
CODESYSControl for PFC200 SL4.16.0.0
CODESYSControl for emPC-A/iMX6 SL4.16.0.0
CODESYSControl for PLCnext SL4.16.0.0
CODESYSControl for WAGO Touch Panels 600 SL4.16.0.0
CODESYSControl for PFC100 SL4.16.0.0
CODESYSControl Win (SL)3.5.21.10
CODESYSControl for BeagleBone SL4.16.0.0
CODESYSControl RTE (SL)3.5.21.10
CODESYSControl RTE (for Beckhoff CX) SL3.5.21.10
CODESYSControl for Linux ARM SL4.16.0.0

Timeline

  • Aug 4, 2025 PoC Published
  • Aug 4, 2025 PoC Published
  • Jan 6, 2026 CVE Published
  • Feb 24, 2026 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›