CVE-2025-41659

8.3 highEPSS 0.2%

High (8.3). EPSS 0.2% chance of exploitation in the next 30 days.

A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and write certificates and its keys. This allows sensitive data to be extracted or to accept certificates as trusted. Although all services remain available, only unencrypted communication is possible if the certificates are deleted.

Severity

CVSS 3.1

8.3 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2025-08-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://certvde.com/de/advisories/VDE-2025-051

Check your stack JSON