Codesys Gateway For Windows vulnerabilities

2 CVEs affecting Codesys Gateway For Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-41975, published 2025-03-18.

More from Codesys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-41975, published 2025-03-18. Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days. An unauthenticated remote attacker can gain limited information of the PLC network but the user management of the PLCs prevents the actual access to the PLCs.
• CVE-2023-5751, published 2024-06-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products due to exposure of resource to wrong sphere.