← Back

CVE-2022-22508

nvd nist
Published: May 15, 2023Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Exploitability: 2.8 / Impact: 1.4
Source: info@cert.vde.com (Secondary)

Description

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

Affected (14)

Codesys
14 products
Control For Beaglebone Sl
Control For Empc A/imx6 Sl
Control For Iot2000 Sl
Control For Linux Sl
Control For Pfc100 Sl
Control For Pfc200 Sl
Control For Plcnext Sl
Control For Raspberry Pi Sl
Control For Wago Touch Panels 600 Sl
Control Rte (for Beckhoff Cx) Sl
Control Rte (sl)
Control Runtime System Toolkit
Control Win (sl)
Hmi (sl)
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone Sl
Before 4.7.0.0
Control For Empc A/imx6 Sl
Before 4.7.0.0
Control For Iot2000 Sl
Before 4.7.0.0
Control For Linux Sl
Before 4.7.0.0
Control For Pfc100 Sl
Before 4.7.0.0
Control For Pfc200 Sl
Before 4.7.0.0
Control For Plcnext Sl
Before 4.7.0.0
Control For Raspberry Pi Sl
Before 4.7.0.0
Control For Wago Touch Panels 600 Sl
Before 4.7.0.0
Control Rte (for Beckhoff Cx) Sl
Before 3.5.18.40
Control Rte (sl)
Before 3.5.18.40
Control Runtime System Toolkit
Before 3.5.18.40
Control Win (sl)
Before 3.5.18.40
Hmi (sl)
Before 3.5.18.40

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: info@cert.vde.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.