Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-35227

Improper resource management in CODESYS Modbus TCP Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing legitimate clients from establishing new connections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Modbus

Default version status: unaffected

  • 1.0.0.0 to < 4.6.0.0affected

References