CVE-2025-0694 MEDIUM

CVE-2025-0694: CODESYS Control V3 removable media path traversal

Vendor Codesys
Product CODESYS Control for BeagleBone SL
Weakness CWE-22 · Path traversal
Published March 18, 2025
Last update March 18, 2025
View on NVD All CVEs

CVSS base score

6.6/10
Attack vector Physical
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Insufficient path validation in CODESYS Control allows low privileged attackers with physical access to gain full filesystem access.

Key dates

02Disclosure timeline

March 18, 2025 CVE published
March 18, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-33166 Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers) CVE-2026-25116 Runtipi vulnerable to unauthenticated docker-compose.yml Overwrite via Path Traversal CVE-2024-7744 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP Server CVE-2025-66251 Unauthenticated Path Traversal with Arbitrary File Deletion CVE-2024-31451 Limited file write in routes.py (GHSL-2023-250)