In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
References
| Link | Resource |
|---|---|
| https://cert.vde.com/en/advisories/VDE-2023-025/ | Mitigation Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2023, 15:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://cert.vde.com/en/advisories/VDE-2023-025/ - Mitigation, Third Party Advisory | |
| CPE | cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* |
03 Aug 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-03 13:15
Updated : 2024-02-05 00:01
NVD link : CVE-2022-4046
Mitre link : CVE-2022-4046
CVE.ORG link : CVE-2022-4046
JSON object : View
Products Affected
codesys
- control_rte_sl_\(for_beckhoff_cx\)
- hmi_sl
- control_for_raspberry_pi_sl
- control_rte_sl
- control_runtime_system_toolkit
- control_for_pfc100_sl
- control_win_sl
- control_for_iot2000_sl
- control_for_pfc200_sl
- control_for_wago_touch_panels_600_sl
- control_for_empc-a\/imx6_sl
- control_for_linux_sl
- control_for_beaglebone_sl
- control_for_plcnext_sl
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer