PT-2025-17608 · 3S Smart Software Solutions · Codesys Visualization

M. Ankith · Published 2025-04-23 · Updated 2025-04-23 · CVE-2025-2595

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions CODESYS Visualization (affected versions not specified)

Description An unauthenticated remote attacker can bypass user management and read visualization template files or static elements through forced browsing. This issue affects the CODESYS Visualization software, allowing unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2025-2595

Affected Products

Codesys Visualization

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-2595 · Security Note
• https://twitter.com/CVEnew/status/1914957474261819746 · Twitter Post
• https://t.me/cvetracker/22186 · Telegram Post
• https://t.me/cvedetector/23579 · Telegram Post
• https://certvde.com/en/advisories/VDE-2025-027 · Note
• https://twitter.com/WolfgangSesin/status/1915022273846673628 · Twitter Post
• https://t.me/cvenotify/119488 · Telegram Post