In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
References
Configurations
Configuration 1 (hide)
|
History
09 Aug 2023, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device. |
06 Jul 2023, 14:37
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1188 |
30 Mar 2023, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download= - Vendor Advisory |
23 Mar 2023, 13:41
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-23 12:15
Updated : 2024-02-04 23:37
NVD link : CVE-2022-4224
Mitre link : CVE-2022-4224
CVE.ORG link : CVE-2022-4224
JSON object : View
Products Affected
codesys
- control_rte_sl_\(for_beckhoff_cx\)
- hmi_sl
- control_for_raspberry_pi_sl
- control_rte_sl
- control_win_sl
- control_for_pfc100_sl
- development_system
- control_for_iot2000_sl
- control_for_pfc200_sl
- safety_sil2
- control_for_wago_touch_panels_600_sl
- control_for_empc-a\/imx6_sl
- control_for_linux_sl
- control_for_beaglebone_sl
- runtime_toolkit
- control_for_plcnext_sl
CWE
CWE-1188
Insecure Default Initialization of Resource