← CVE Intelligence

CVE-2022-30791

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections PUBLISHED

Description (CNA)

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Control RTE (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Control RTE (for Beckhoff CX) SLaffected V3 before V3.5.18.20
CODESYS / CODESYS Control Win (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Gatewayaffected V3 before V3.5.18.20
CODESYS / CODESYS Edge Gateway for Windowsaffected V3 before V3.5.18.20
CODESYS / CODESYS HMI (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Development System V3affected V3 before V3.5.18.10
CODESYS / CODESYS Control Runtime System Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Embedded Target Visu Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Remote Target Visu Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Control for BeagleBone SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Beckhoff CX9020 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for emPC-A/iMX6 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for IOT2000 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Linux SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PFC100 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PFC200 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PLCnext SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Raspberry Pi SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for WAGO Touch Panels 600 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Edge Gateway for Linuxaffected V3 before V4.5.0.0

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.