← CVE Intelligence

CVE-2022-30792

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels PUBLISHED

Description (CNA)

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Control RTE (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Control RTE (for Beckhoff CX) SLaffected V3 before V3.5.18.20
CODESYS / CODESYS Control Win (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Gatewayaffected V3 before V3.5.18.20
CODESYS / CODESYS Edge Gateway for Windowsaffected V3 before V3.5.18.20
CODESYS / CODESYS HMI (SL)affected V3 before V3.5.18.20
CODESYS / CODESYS Development System V3affected V3 before V3.5.18.10
CODESYS / CODESYS Control Runtime System Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Embedded Target Visu Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Remote Target Visu Toolkitaffected V3 before V3.5.18.20
CODESYS / CODESYS Control for BeagleBone SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Beckhoff CX9020 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for emPC-A/iMX6 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for IOT2000 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Linux SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PFC100 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PFC200 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for PLCnext SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for Raspberry Pi SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Control for WAGO Touch Panels 600 SLaffected V3 before V4.5.0.0
CODESYS / CODESYS Edge Gateway for Linuxaffected V3 before V4.5.0.0

CWE

CWE-400

References

ADP enrichment

CVE

No English description supplied.