VULNERABILITY INTELLIGENCE

CVE-2025-41700

CVSS score7.8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-12-01
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

Weakness classification

  • info@cert.vde.com: CWE-502

Primary references