CVE-2025-2595 MEDIUM

CVE-2025-2595: Forced Browsing Vulnerability in CODESYS Visualization

Vendor Codesys
Product CODESYS Visualization
Weakness CWE-425 · Forced browsing
Published April 23, 2025
Last update April 23, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An unauthenticated remote attacker can bypass the user management in CODESYS Visualization and read visualization template files or static elements by means of forced browsing.

Key dates

02Disclosure timeline

April 23, 2025 CVE published
April 23, 2025 Record updated