Security Advisory

CVE-2025-41700

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-01 10:02:47
Last updated 2025-12-01 13:59:26
Assigner CERTVDE
State PUBLISHED

Description

An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated CODESYS project file with a CODESYS development system. This arbitrary code is executed in the user context.