CVE-2022-22508
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Modified - info@cert.vde.com
- Published
- 2023-05-15
- Last modified
- 2025-01-23
- Weaknesses
- CWE-20
Affected products
- Control For Beaglebone Sl (Codesys)
- Control For Empc-a/imx6 Sl (Codesys)
- Control For Iot2000 Sl (Codesys)
- Control For Linux Sl (Codesys)
- Control For Pfc100 Sl (Codesys)
- Control For Pfc200 Sl (Codesys)
- Control For Plcnext Sl (Codesys)
- Control For Raspberry Pi Sl (Codesys)
- Control For Wago Touch Panels 600 Sl (Codesys)
- Control Rte (for Beckhoff Cx) Sl (Codesys)
- Control Rte (sl) (Codesys)
- Control Runtime System Toolkit (Codesys)
- Control Win (sl) (Codesys)
- Hmi (sl) (Codesys)
- Codesys Control For Beaglebone Sl (Codesys V3)
- Codesys Control For Empc-aimx6 Sl (Codesys V3)
- Codesys Control For Iot2000 Sl (Codesys V3)
- Codesys Control For Linux Sl (Codesys V3)
- Codesys Control For Pfc100 Sl (Codesys V3)
- Codesys Control For Pfc200 Sl (Codesys V3)
- Codesys Control For Plcnext Sl (Codesys V3)
- Codesys Control For Raspberry Pi Sl (Codesys V3)
- Codesys Control For Wago Touch Panels 600 Sl (Codesys V3)
- Codesys Control Rte For Beckhoff Cx Sl (Codesys V3)
- Codesys Control Rte Sl (Codesys V3)
- Codesys Control Runtime System Toolkit (Codesys V3)
- Codesys Control Win Sl (Codesys V3)
- Codesys Hmi Sl (Codesys V3)
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17351&token=a7c02b2825fea2bcaf80c1a8e62097d72ec90f1a&downloa…
