High (7.7) in codesys development system v3. EPSS 0.08% chance of exploitation in the next 30 days.
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
Severity
CVSS 3.1
7.7 high
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.08% chance of exploitation in the next 30 days; higher than 0% of CVEs (scores of 2026-10-31)