CODESYS Visualization User Management Bypass Advisory

This document is a security advisory detailing a vulnerability in CODESYS Visualization that allows unauthenticated attackers to read static visualization files through a user management bypass via forced browsing. The advisory identifies affected products, including various versions of CODESYS Visualization and CODESYS Control products. It outlines the vulnerability identifiers, including CVE-2025-2595, and provides a CVSS v3.1 base score of 5.3, indicating a medium severity level. The impact of the vulnerability is described, noting that it enables attackers to access static visualization data without compromising live system data. Remediation steps are provided, recommending updates to specific product versions to mitigate the vulnerability. Additionally, general security recommendations are included to enhance security practices, such as using firewalls, applying user management features, and utilizing encrypted communication links. Acknowledgments for reporting the issue and contact information for further inquiries are also presented.