← Back

CVE-2022-4224

nvd nist
Published: Mar 23, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

Affected (16)

Codesys
16 products
Control For Beaglebone Sl
Control For Empc A/imx6 Sl
Control For Iot2000 Sl
Control For Linux Sl
Control For Pfc100 Sl
Control For Pfc200 Sl
Control For Plcnext Sl
Control For Raspberry Pi Sl
Control For Wago Touch Panels 600 Sl
Control Rte Sl
Control Rte Sl (for Beckhoff Cx)
Control Win Sl
Development System
Hmi Sl
Runtime Toolkit
Safety Sil2
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone Sl
From 3.0 to 4.8.0.0
Control For Empc A/imx6 Sl
From 3.0 to 4.8.0.0
Control For Iot2000 Sl
From 3.0 to 4.8.0.0
Control For Linux Sl
From 3.0 to 4.8.0.0
Control For Pfc100 Sl
From 3.0 to 4.8.0.0
Control For Pfc200 Sl
From 3.0 to 4.8.0.0
Control For Plcnext Sl
From 3.0 to 4.8.0.0
Control For Raspberry Pi Sl
From 3.0 to 4.8.0.0
Control For Wago Touch Panels 600 Sl
From 3.0 to 4.8.0.0
Control Rte Sl
From 3.0 to 3.5.19.0
Control Rte Sl (for Beckhoff Cx)
From 3.0 to 3.5.19.0
Control Win Sl
From 3.0 to 3.5.19.0
Development System
From 3.0 to 3.5.19.0
Hmi Sl
From 3.0 to 3.5.19.0
Runtime Toolkit
From 3.0 to 3.5.19.0
Safety Sil2
From 3.0 to 3.5.19.0

Related CWEs

CWE-1188
Initialization of a Resource with an Insecure Default
The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.

References (2)

Source: info@cert.vde.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.