CVE-2025-41700

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://certvde.com/de/advisories/VDE-2025-101	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:codesys:codesys:*:*:*:*:*:*:*:*

History

18 Oct 2026, 18:10

Type	Values Removed	Values Added
Summary		(es) Un atacante no autenticado puede engañar a un usuario local para que ejecute código arbitrario al abrir un archivo de proyecto CODESYS manipulado deliberadamente con un sistema de desarrollo CODESYS. Este código arbitrario se ejecuta en el contexto del usuario.

Information

Published : 2025-12-01 10:16

Updated : 2026-10-18 20:10

NVD link : CVE-2025-41700

Mitre link : CVE-2025-41700

CVE.ORG link : CVE-2025-41700

JSON object : View

Products Affected

codesys

codesys

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2025-41700", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-41700", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-01T13:25:21.754600Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "info@cert.vde.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "info@cert.vde.com", "affectedData": [{"vendor": "CODESYS", "product": "CODESYS Development System", "versions": [{"status": "affected", "version": "0.0.0", "lessThan": "3.5.21.40", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-01T10:16:00.440", "references": [{"url": "https://certvde.com/de/advisories/VDE-2025-101", "tags": ["Third Party Advisory"], "source": "info@cert.vde.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context."}, {"lang": "es", "value": "Un atacante no autenticado puede enga\u00f1ar a un usuario local para que ejecute c\u00f3digo arbitrario al abrir un archivo de proyecto CODESYS manipulado deliberadamente con un sistema de desarrollo CODESYS. Este c\u00f3digo arbitrario se ejecuta en el contexto del usuario."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:codesys:codesys:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "052A4384-EDBE-44B7-82E2-2B8724F9A3A5", "versionEndExcluding": "3.5.21.40"}], "operator": "OR"}]}], "sourceIdentifier": "info@cert.vde.com"}