Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-79625

Improper Synchronization in Monitoring in CODESYS Control Runtime

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit this issue to cause incorrect data processing or a denial-of-service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS Control RTE (SL)

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Control RTE (for Beckhoff CX) SL

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Control Win (SL)

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Runtime Toolkit

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Safety SIL2

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS HMI (SL)

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Development System 3

Default version status: unaffected

  • 3.0.0.0 to < 3.5.22.40affected

CODESYS Control for BeagleBone SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for emPC-A/iMX6 SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for IOT2000 SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for Linux ARM SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for Linux SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for PFC100 SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for PFC200 SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for PLCnext SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for Raspberry Pi SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Control for WAGO Touch Panels 600 SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

CODESYS Virtual Control SL

Default version status: unaffected

  • 3.5.0.0 to < 4.23.0.0affected

References