CVE-2025-2595

5.3 mediumEPSS 0.5%

Medium (5.3). EPSS 0.5% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-425
Published: 2025-04-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://certvde.com/en/advisories/VDE-2025-027

Check your stack JSON