← CVE Intelligence

CVE-2022-22518

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy. PUBLISHED

Description (CNA)

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Control for BeagleBone SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for Beckhoff CX9020 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for emPC-A/iMX6 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for IOT2000 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for Linux SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for PFC100 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for PFC200 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for Raspberry Pi SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control for WAGO Touch Panels 600 SLaffected V4.5.0.0 before V4.5.0.0
CODESYS / CODESYS Control Runtime System Toolkitaffected V3.5.18.0 before V3.5.18.0

CWE

CWE-276

References

ADP enrichment

CVE

No English description supplied.