CVE-2021-29241: Codesys Control For Beaglebone Sl

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS).

Affected products

• Codesys Control For Beaglebone Sl: from 3.0, before 4.0.1.0 (fixed in 4.0.1.0)
• Codesys Control For Empc-a/imx6 Sl: from 3.0, before 4.0.1.0 (fixed in 4.0.1.0)
• Codesys Control For IOT2000 Sl: from 3.0, before 4.0.1.0 (fixed in 4.0.1.0)
• Codesys Control For Linux Sl: from 3.0, before 4.0.1.0 (fixed in 4.0.1.0)
• Codesys Control For PFC100 Sl: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For PFC200 Sl: from 3.0, before 3.5.16.0 (fixed in 3.5.16.0)
• Codesys Control For Raspberry Pi Sl: from 3.0, before 4.0.1.0 (fixed in 4.0.1.0)
• Codesys Control Runtime System Toolkit: from 3.0, before 3.5.16.70 (fixed in 3.5.16.70)
• Codesys Development System: from 3.0, before 3.5.16.70 (fixed in 3.5.16.70)
• Codesys Edge Gateway: from 3.0, before 3.5.16.70 (fixed in 3.5.16.70); from 3.0, before 4.1.0.0 (fixed in 4.1.0.0)
• Codesys Gateway: from 3.0, before 3.5.16.70 (fixed in 3.5.16.70)

Published 2021-05-03. Last modified 2026-06-17.