CVE-2024-41975CWE-1188

CODESYS (Edge) Gateway for Windows insecure default

Medium · published March 18, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
37.9
In the wild
Unconfirmed
What it is

An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00447 · 37.9th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2025-03-18T11:04Z
EPSS history
Timeline
  • 18 MAR 11:04Z
    CODESYS (Edge) Gateway for Windows insecure default
    cvelistv5