Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2025-41658

CODESYS Toolkit Exposes Sensitive Files via Default Permissions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS Runtime Toolkit

Default version status: unaffected

  • 0.0.0.0 to < 3.5.21.20affected

CODESYS Control for BeagleBone SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for emPC-A/iMX6 SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for IOT2000 SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for Linux ARM SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for Linux SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for PFC100 SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for PFC200 SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for PLCnext SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for Raspberry Pi SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Control for WAGO Touch Panels 600 SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

CODESYS Virtual Control SL

Default version status: unaffected

  • 0.0.0.0 to < 4.16.0.0affected

References