https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 18:20:24 +0000 https://cve.radiocsirt.org/vuln/advisory2026-06_vde-2026-041 <p>CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.</p> <p>The vulnerability in the CODESYS PROFINET Controller is caused by an out‑of‑bounds write during the processing of received invalid PROFINET communication data. Triggering this condition causes the CODESYS Control runtime system to handle the resulting exception and stop the affected PLC application in a controlled manner. Remote code execution is not considered feasible, as the execution flow remains controlled.</p> <p>This issue affects only CODESYS projects that include a PROFINET Controller configuration.</p> <p>CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.</p> <p>The vulnerability in the CODESYS PROFINET Controller is caused by an out‑of‑bounds write during the processing of received invalid PROFINET communication data. Triggering this condition causes the CODESYS Control runtime system to handle the resulting exception and stop the affected PLC application in a controlled manner. Remote code execution is not considered feasible, as the execution flow remains controlled.</p> <p>This issue affects only CODESYS projects that include a PROFINET Controller configuration.</p> https://cve.radiocsirt.org/vuln/advisory2026-06_vde-2026-041 https://cve.radiocsirt.org/vuln/euvd-2026-342371 EUVD-2026-342371 https://cve.radiocsirt.org/vuln/euvd-2026-342371 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35226 <p>An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.</p> <p>An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35226 https://cve.radiocsirt.org/vuln/ghsa-jxhr-7f6w-54g7 <p>An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.</p> <p>An out‑of‑bounds write vulnerability in the CODESYS PROFINET Controller allows an unauthenticated attacker on the same network segment to send malformed PROFINET communication data that triggers an exception in the affected PLC application. The exception is handled by the CODESYS Control runtime system and results in a controlled stop of the PLC application.</p> https://cve.radiocsirt.org/vuln/ghsa-jxhr-7f6w-54g7 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2555 <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in CODESYS ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in CODESYS ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2555