CVE-2022-4048 — CODESYS V3 prone to Inadequate Encryption Stregth

CVE-2022-4048

CODESYS V3 prone to Inadequate Encryption Stregth PUBLISHED

Description (CNA)

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Affected (CNA)

Vendor / product	Versions
CODESYS / CODESYS Development System V3	affected V0.0.0.0 before V3.5.18.40

CWE

CWE-326

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=

ADP enrichment

CVE

No English description supplied.

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=

CISA-ADP

No English description supplied.

No references supplied.