CVE-2022-22508 — CODESYS V3: Improper Input Validation

Description (CNA)

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

Affected (CNA)

Vendor / product	Versions
CODESYS V3 / CODESYS Control RTE (SL)	affected V0.0.0.0 before V3.5.18.40
CODESYS V3 / CODESYS Control RTE (for Beckhoff CX) SL	affected V0.0.0.0 before V3.5.18.40
CODESYS V3 / CODESYS Control Win (SL)	affected V0.0.0.0 before V3.5.18.40
CODESYS V3 / CODESYS HMI (SL)	affected V0.0.0.0 before V3.5.18.40
CODESYS V3 / CODESYS Control Runtime System Toolkit	affected V0.0.0.0 before V3.5.18.40
CODESYS V3 / CODESYS Control for BeagleBone SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for emPC-A/iMX6 SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for IOT2000 SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for Linux SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for PFC100 SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for PFC200 SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for PLCnext SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for Raspberry Pi SL	affected V0.0.0.0 before V4.7.0.0
CODESYS V3 / CODESYS Control for WAGO Touch Panels 600 SL	affected V0.0.0.0 before V4.7.0.0

CWE

CWE-20

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17351&token=a7c02b2825fea2bcaf80c1a8e62097d72ec90f1a&download=

ADP enrichment

CVE

No English description supplied.

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17351&token=a7c02b2825fea2bcaf80c1a8e62097d72ec90f1a&download=

CISA-ADP

No English description supplied.

No references supplied.