Vulnerability in Codesys Ethernetip
CVE-2026-35225
An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.
EPSS: 0.004 (34.2th percentile) — read the EPSS interpretation.
Affected products
- Codesys Ethernetip — versions 1.0.0.0
Weakness classification (CWE)
References
- info@cert.vde.com (vendor-advisory)
- info@cert.vde.com (vendor-advisory)