Lucene search

[email protected]CVE-2022-4046

HistoryAug 03, 2023 - 1:15 p.m.

CVE-2022-4046

2023-08-0313:15:09

CWE-119

[email protected]

web.nvd.nist.gov

codesys

control

remote attacker

gain full access

cve-2022-4046

security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.

Affected configurations

NVD

Node

codesyscontrol_for_beaglebone_sl

codesyscontrol_for_empc-a\/imx6_sl

codesyscontrol_for_iot2000_sl

codesyscontrol_for_linux_sl

codesyscontrol_for_pfc100_sl

codesyscontrol_for_pfc200_sl

codesyscontrol_for_plcnext_sl

codesyscontrol_for_raspberry_pi_sl

codesyscontrol_for_wago_touch_panels_600_sl

codesyscontrol_rte_sl

codesyscontrol_rte_sl_\(for_beckhoff_cx\)

codesyscontrol_runtime_system_toolkit

codesyscontrol_win_sl

codesyshmi_sl

CPENameOperatorVersion
codesys:control_for_beaglebone_slcodesys control for beaglebone sleq*
codesys:control_for_empc-a\/imx6_slcodesys control for empc-a/imx6 sleq*
codesys:control_for_iot2000_slcodesys control for iot2000 sleq*
codesys:control_for_linux_slcodesys control for linux sleq*
codesys:control_for_pfc100_slcodesys control for pfc100 sleq*
codesys:control_for_pfc200_slcodesys control for pfc200 sleq*
codesys:control_for_plcnext_slcodesys control for plcnext sleq*
codesys:control_for_raspberry_pi_slcodesys control for raspberry pi sleq*
codesys:control_for_wago_touch_panels_600_slcodesys control for wago touch panels 600 sleq*
codesys:control_rte_slcodesys control rte sleq*

CPE	Name	Operator	Version
codesys:control_for_beaglebone_sl	codesys control for beaglebone sl	eq	*
codesys:control_for_empc-a\/imx6_sl	codesys control for empc-a/imx6 sl	eq	*
codesys:control_for_iot2000_sl	codesys control for iot2000 sl	eq	*
codesys:control_for_linux_sl	codesys control for linux sl	eq	*
codesys:control_for_pfc100_sl	codesys control for pfc100 sl	eq	*
codesys:control_for_pfc200_sl	codesys control for pfc200 sl	eq	*
codesys:control_for_plcnext_sl	codesys control for plcnext sl	eq	*
codesys:control_for_raspberry_pi_sl	codesys control for raspberry pi sl	eq	*
codesys:control_for_wago_touch_panels_600_sl	codesys control for wago touch panels 600 sl	eq	*
codesys:control_rte_sl	codesys control rte sl	eq	*

Rows per page:

1-10 of 141

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for BeagleBone SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for emPC-A/iMX6 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for IOT2000 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for Linux SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for PFC100 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for PFC200 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for PLCnext SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for Raspberry Pi SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control for WAGO Touch Panels 600 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control RTE (for Beckhoff CX) SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control RTE (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control Runtime System Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS Control Win (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "CODESYS HMI (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2023-025/

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.5%

JSON

Related for CVE-2022-4046

prion1 cvelist1 nvd1