CVE-2025-41658: Codesys Control For Beaglebone Sl

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions.

Affected products

• Codesys Control For Beaglebone Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Empc-a/imx6 Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For IOT2000 Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Linux Arm Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Linux Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For PFC100 Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For PFC200 Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Plcnext Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Raspberry Pi Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Control For Wago Touch Panels 600 Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)
• Codesys Runtime Toolkit: from 0.0.0.0, before 3.5.21.20 (fixed in 3.5.21.20)
• Codesys Virtual Control Sl: from 0.0.0.0, before 4.16.0.0 (fixed in 4.16.0.0)

Published 2025-08-04. Last modified 2026-06-17.