← Back

CVE-2022-4046

nvd nist
Published: Aug 3, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: info@cert.vde.com (Secondary)

Description

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.

Affected (14)

Codesys
14 products
Control For Beaglebone Sl
Control For Empc A/imx6 Sl
Control For Iot2000 Sl
Control For Linux Sl
Control For Pfc100 Sl
Control For Pfc200 Sl
Control For Plcnext Sl
Control For Raspberry Pi Sl
Control For Wago Touch Panels 600 Sl
Control Rte Sl
Control Rte Sl (for Beckhoff Cx)
Control Runtime System Toolkit
Control Win Sl
Hmi Sl
Configuration A
14 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone Sl
All versions
Control For Empc A/imx6 Sl
All versions
Control For Iot2000 Sl
All versions
Control For Linux Sl
All versions
Control For Pfc100 Sl
All versions
Control For Pfc200 Sl
All versions
Control For Plcnext Sl
All versions
Control For Raspberry Pi Sl
All versions
Control For Wago Touch Panels 600 Sl
All versions
Control Rte Sl
All versions
Control Rte Sl (for Beckhoff Cx)
All versions
Control Runtime System Toolkit
All versions
Control Win Sl
All versions
Hmi Sl
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: info@cert.vde.com
MitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party Advisory

Timeline

No history available yet.