PT-2025-11584 · Codesys · Codesys Edge Gateway+1

Diego Guibertoni · CVE-2024-41975 · Published 2025-03-18 · Updated 2026-05-12

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description An unauthenticated remote attacker can gain limited information of the PLC network, but the user management of the PLCs prevents actual access to the PLCs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2024-41975

Affected Products

Codesys Edge Gateway

Codesys Gateway For Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-41975 · Security Note
• https://t.me/cvetracker/19356 · Telegram Post
• https://twitter.com/aviatrixtrc/status/2054249991216992266 · Twitter Post
• https://cert.vde.com/en/advisories/VDE-2025-013 · Note
• https://t.me/cvedetector/20562 · Telegram Post
• https://twitter.com/WolfgangSesin/status/1901985238466679279 · Twitter Post
• https://twitter.com/CVEnew/status/1901958501104058778 · Twitter Post
• https://t.me/cvenotify/115121 · Telegram Post