← Back

CVE-2022-47391

nvd nist
Published: May 15, 2023Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: info@cert.vde.com (Secondary)

Description

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.

Affected (17)

Codesys
17 products
Control For Beaglebone Sl
Control For Empc A/imx6 Sl
Control For Iot2000 Sl
Control For Linux Sl
Control For Pfc100 Sl
Control For Pfc200 Sl
Control For Plcnext Sl
Control For Raspberry Pi Sl
Control For Wago Touch Panels 600 Sl
Control Rte (for Beckhoff Cx) Sl
Control Rte (sl)
Control Runtime System Toolkit
Control Win (sl)
Development System V3
Hmi (sl)
Safety Sil2 Psp
Safety Sil2 Runtime Toolkit
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Control For Beaglebone Sl
Before 4.8.0.0
Control For Empc A/imx6 Sl
Before 4.8.0.0
Control For Iot2000 Sl
Before 4.8.0.0
Control For Linux Sl
Before 4.8.0.0
Control For Pfc100 Sl
Before 4.8.0.0
Control For Pfc200 Sl
Before 4.8.0.0
Control For Plcnext Sl
Before 4.8.0.0
Control For Raspberry Pi Sl
Before 4.8.0.0
Control For Wago Touch Panels 600 Sl
Before 4.8.0.0
Control Rte (for Beckhoff Cx) Sl
Before 3.5.19.0
Control Rte (sl)
Before 3.5.19.0
Control Runtime System Toolkit
Before 3.5.19.0
Control Win (sl)
Before 3.5.19.0
Development System V3
Before 3.5.19.0
Hmi (sl)
Before 3.5.19.0
Safety Sil2 Psp
Before 3.5.19.0
Safety Sil2 Runtime Toolkit
Before 3.5.19.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: info@cert.vde.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.