https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:05:27 +0000 https://cve.radiocsirt.org/vuln/advisory2026-04_vde-2026-040 <p>CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the generated application code. When an EtherNet/IP adapter is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.</p> <p>Under certain non‑standard operating conditions, the EtherNet/IP adapter fails to perform timeout checks on active TCP connections. As a result, once all available TCP connections are in use, expired connections are not released and no new TCP connections can be established. Existing connections remain unaffected and continue to operate normally.</p> <p>This issue affects only CODESYS projects that include an EtherNet/IP adapter configuration.</p> <p>CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the generated application code. When an EtherNet/IP adapter is configured, this vulnerable protocol stack is downloaded to and executed by CODESYS Control runtime systems.</p> <p>Under certain non‑standard operating conditions, the EtherNet/IP adapter fails to perform timeout checks on active TCP connections. As a result, once all available TCP connections are in use, expired connections are not released and no new TCP connections can be established. Existing connections remain unaffected and continue to operate normally.</p> <p>This issue affects only CODESYS projects that include an EtherNet/IP adapter configuration.</p> https://cve.radiocsirt.org/vuln/advisory2026-04_vde-2026-040 https://cve.radiocsirt.org/vuln/euvd-2026-292773 EUVD-2026-292773 https://cve.radiocsirt.org/vuln/euvd-2026-292773 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35225 <p>An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.</p> <p>An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-35225 https://cve.radiocsirt.org/vuln/ghsa-c7pv-j8xr-mmhj <p>An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.</p> <p>An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.</p> https://cve.radiocsirt.org/vuln/ghsa-c7pv-j8xr-mmhj