An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
References
Configurations
Configuration 1 (hide)
|
History
27 Apr 2022, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash. | |
| CWE | CWE-822 |
18 Apr 2022, 10:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 | |
| CVSS |
v2 : v3 : |
v2 : 4.9
v3 : 7.1 |
| References | (MISC) https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17093&token=15cd8424832ea10dcd4873a409a09a539ee381ca&download= - Vendor Advisory | |
| CPE | cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:* cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:* cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* |
07 Apr 2022, 19:50
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-04-07 19:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-22514
Mitre link : CVE-2022-22514
CVE.ORG link : CVE-2022-22514
JSON object : View
Products Affected
codesys
- control_for_iot2000_sl
- control_for_raspberry_pi_sl
- control_for_pfc200_sl
- control_for_plcnext_sl
- control_rte_sl_\(for_beckhoff_cx\)
- hmi_sl
- embedded_target_visu_toolkit
- control_rte_sl
- control_for_pfc100_sl
- edge_gateway
- gateway
- control_win_sl
- control_for_beckhoff_cx9020
- remote_target_visu_toolkit
- development_system
- control_for_wago_touch_panels_600_sl
- control_for_linux_sl
- control_runtime_system_toolkit
- control_for_beaglebone_sl
- control_for_empc-a\/imx6_sl