← CVE Intelligence

CVE-2022-4224

CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3 PUBLISHED

Description (CNA)

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

Affected (CNA)

Vendor / productVersions
CODESYS / Control RTE (SL) affected 3.0.0.0 before 3.5.19.0
CODESYS / Control RTE (for Beckhoff CX) SLaffected 3.0.0.0 before 3.5.19.0
CODESYS / Control Win (SL)affected 3.0.0.0 before 3.5.19.0
CODESYS / Runtime Toolkit affected 3.0.0.0 before 3.5.19.0
CODESYS / Safety SIL2 Runtime Toolkitaffected 3.0.0.0 before 3.5.19.0
CODESYS / Safety SIL2 PSPaffected 3.0.0.0 before 3.5.19.0
CODESYS / HMI (SL) affected 3.0.0.0 before 3.5.19.0
CODESYS / Development System V3affected 3.0.0.0 before 3.5.19.0
CODESYS / Control for BeagleBone SL affected 3.0.0.0 before 4.8.0.0
CODESYS / Control for emPC-A/iMX6 SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for IOT2000 SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for Linux SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for PFC100 SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for PFC200 SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for PLCnext SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for Raspberry Pi SLaffected 3.0.0.0 before 4.8.0.0
CODESYS / Control for WAGO Touch Panels 600 SLaffected 3.0.0.0 before 4.8.0.0

CWE

CWE-1188

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.