CVE-2022-1965

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.

Score

CVSS 3.1 8.1 High

Status

Modified - info@cert.vde.com

Published

2022-06-24

Last modified

2024-09-16

Weaknesses

CWE-755

Affected products

• Plcwinnt (Codesys)
• Runtime Toolkit (Codesys)

References

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&downloa…