CVE-2025-41700 — CODESYS Development System - Deserialization of Untrusted Data
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. Th…
Published: 2025-12-01 · CVSS: 7.8 · CVSS 3.1
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7