HIGH🇵🇱 Wersja polska

CVE-2022-22517

CVSS 7.5v3.1pub. 2022-04-07upd. 2024-11-21

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Codesys Control For Beaglebone Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Beckhoff Cx9020

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Empc A\/imx6 Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Iot2000 Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Linux Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Pfc100 Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Pfc200 Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Plcnext Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Raspberry Pi Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control For Wago Touch Panels 600 Sl

    APP
    Codesys
    < 4.5.0.0

  • Codesys Control Rte Sl

    APP
    Codesys
    < 3.5.18.0

  • Codesys Control Rte Sl \(for Beckhoff Cx\)

    APP
    Codesys
    < 3.5.18.0

  • Codesys Control Runtime System Toolkit

    APP
    Codesys
    < 3.5.18.0

  • Codesys Control Win Sl

    APP
    Codesys
    < 3.5.18.0

  • Codesys Development System

    APP
    Codesys
    3.0 – 3.5.18.0 (bez)

  • Codesys Edge Gateway

    APP
    Codesys
    < 3.5.18.0< 4.5.0.0

  • Codesys Embedded Target Visu Toolkit

    APP
    Codesys
    < 3.5.18.0

  • Codesys Gateway

    APP
    Codesys
    < 3.5.18.0

  • Codesys Hmi Sl

    APP
    Codesys
    < 3.5.18.0

  • Codesys Remote Target Visu Toolkit

    APP
    Codesys
    < 3.5.18.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2022-31802CRITICAL9.8ten sam produkt

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been...

CVE-2021-33485CRITICAL9.8ten sam produkt

CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.

CVE-2020-10245CRITICAL9.8ten sam produkt

CODESYS V3 web server before 3.5.15.40, as used in CODESYS Control runtime systems, has a buffer overflow.

CVE-2019-18858CRITICAL9.8ten sam produkt

CODESYS 3 web server before 3.5.15.20, as distributed with CODESYS Control runtime systems, has a Buffer Overf...

CVE-2019-13548CRITICAL9.8ten sam produkt

CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or h...