← CVE Intelligence

CVE-2022-1965

CODESYS runtime system prone to file deletion due to improper error handling PUBLISHED

Description (CNA)

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.

Affected (CNA)

Vendor / productVersions
CODESYS / Runtime Toolkitaffected V2 before V2.4.7.57
CODESYS / PLCWinNTaffected V2 before V2.4.7.57

CWE

CWE-755

References

ADP enrichment

CVE

No English description supplied.