CVE-2022-4046 — CODESYS: Improper memory restrictions fro CODESYS Control

Description (CNA)

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Control for BeagleBone SL	affected all
CODESYS / CODESYS Control for emPC-A/iMX6 SL	affected all
CODESYS / CODESYS Control for IOT2000 SL	affected all
CODESYS / CODESYS Control for Linux SL	affected all
CODESYS / CODESYS Control for PFC100 SL	affected all
CODESYS / CODESYS Control for PFC200 SL	affected all
CODESYS / CODESYS Control for PLCnext SL	affected all
CODESYS / CODESYS Control for Raspberry Pi SL	affected all
CODESYS / CODESYS Control for WAGO Touch Panels 600 SL	affected all
CODESYS / CODESYS Control RTE (for Beckhoff CX) SL	affected all
CODESYS / CODESYS Control RTE (SL)	affected all
CODESYS / CODESYS Control Runtime System Toolkit	affected all
CODESYS / CODESYS Control Win (SL)	affected all
CODESYS / CODESYS HMI (SL)	affected all

CWE

CWE-119

References

https://cert.vde.com/en/advisories/VDE-2023-025/

ADP enrichment

CVE

No English description supplied.

https://cert.vde.com/en/advisories/VDE-2023-025/

CISA-ADP

No English description supplied.

No references supplied.