CVE-2025-41658
BaseFortify
Publication date: 2025-08-04
Last updated on: 2025-08-04
Assigner: CERT VDE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| codesys | codesys_runtime_toolkit | 3.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in CODESYS Runtime Toolkit-based products where sensitive files may be exposed to local low-privileged operating system users because of default file permissions that are too permissive.
How can this vulnerability impact me? :
An attacker with local low-privileged access could read sensitive files that should be protected, potentially leading to unauthorized disclosure of sensitive information.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, review and modify the default file permissions of CODESYS Runtime Toolkit-based products to restrict access for low-privileged local users, ensuring sensitive files are not exposed.