CVE-2025-0694: CODESYS Control V3 removable media path traversal
Published Mar 18, 2025
·Updated
Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.
Affected Software
1 affected component
CODESYS CODESYS Control V3
Event History
Mar 18, 2025
CVE Published
via MITRE·11:04 AM
Data Sourced
via MITRE·11:04 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-0694?
CVE-2025-0694 is classified as a high severity vulnerability due to its potential to allow unauthorized filesystem access.
2
How do I fix CVE-2025-0694?
To mitigate CVE-2025-0694, ensure that physical security measures are in place to restrict unauthorized access to CODESYS Control systems.
3
Who is affected by CVE-2025-0694?
CVE-2025-0694 affects installations of CODESYS Control V3 that are accessible to low privileged attackers.
4
What are the potential risks of CVE-2025-0694?
The risks of CVE-2025-0694 include unauthorized access to sensitive data and modification of system files, potentially compromising system integrity.
5
What are the prerequisites for exploiting CVE-2025-0694?
Exploitation of CVE-2025-0694 requires that the attacker has physical access to the system.