CVE-2022-4224
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - info@cert.vde.com
- Published
- 2023-03-23
- Last modified
- 2026-05-29
- Weaknesses
- CWE-1188
Affected products
- Control For Beaglebone Sl (Codesys)
- Control For Empc-a/imx6 Sl (Codesys)
- Control For Empc-aimx6 Sl (Codesys)
- Control For Iot2000 Sl (Codesys)
- Control For Linux Sl (Codesys)
- Control For Pfc100 Sl (Codesys)
- Control For Pfc200 Sl (Codesys)
- Control For Plcnext Sl (Codesys)
- Control For Raspberry Pi Sl (Codesys)
- Control For Wago Touch Panels 600 Sl (Codesys)
- Control Rte For Beckhoff Cx Sl (Codesys)
- Control Rte Sl (Codesys)
- Control Rte Sl (for Beckhoff Cx) (Codesys)
- Control Win Sl (Codesys)
- Development System (Codesys)
- Development System V3 (Codesys)
- Hmi Sl (Codesys)
- Runtime Toolkit (Codesys)
- Safety Sil2 (Codesys)
- Safety Sil2 Psp (Codesys)
- Safety Sil2 Runtime Toolkit (Codesys)
References
- https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&downloa…
