Lucene search

[email protected]CVE-2022-22508

HistoryMay 15, 2023 - 10:15 a.m.

CVE-2022-22508

2023-05-1510:15:00

CWE-20

[email protected]

web.nvd.nist.gov

cve

2022

22508

improper input validation

codesys v3

nvd

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.6%

JSON

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

CPENameOperatorVersion
codesys:hmi_\(sl\)codesys hmi \(sl\)lt3.5.18.40
codesys:control_win_\(sl\)codesys control win \(sl\)lt3.5.18.40
codesys:control_runtime_system_toolkitcodesys control runtime system toolkitlt3.5.18.40
codesys:control_rte_\(sl\)codesys control rte \(sl\)lt3.5.18.40
codesys:control_rte_\(for_beckhoff_cx\)_slcodesys control rte \(for beckhoff cx\) sllt3.5.18.40
codesys:control_for_wago_touch_panels_600_slcodesys control for wago touch panels 600 sllt4.7.0.0
codesys:control_for_raspberry_pi_slcodesys control for raspberry pi sllt4.7.0.0
codesys:control_for_plcnext_slcodesys control for plcnext sllt4.7.0.0
codesys:control_for_pfc200_slcodesys control for pfc200 sllt4.7.0.0
codesys:control_for_pfc100_slcodesys control for pfc100 sllt4.7.0.0

CPE	Name	Operator	Version
codesys:hmi_\(sl\)	codesys hmi \(sl\)	lt	3.5.18.40
codesys:control_win_\(sl\)	codesys control win \(sl\)	lt	3.5.18.40
codesys:control_runtime_system_toolkit	codesys control runtime system toolkit	lt	3.5.18.40
codesys:control_rte_\(sl\)	codesys control rte \(sl\)	lt	3.5.18.40
codesys:control_rte_\(for_beckhoff_cx\)_sl	codesys control rte \(for beckhoff cx\) sl	lt	3.5.18.40
codesys:control_for_wago_touch_panels_600_sl	codesys control for wago touch panels 600 sl	lt	4.7.0.0
codesys:control_for_raspberry_pi_sl	codesys control for raspberry pi sl	lt	4.7.0.0
codesys:control_for_plcnext_sl	codesys control for plcnext sl	lt	4.7.0.0
codesys:control_for_pfc200_sl	codesys control for pfc200 sl	lt	4.7.0.0
codesys:control_for_pfc100_sl	codesys control for pfc100 sl	lt	4.7.0.0

Rows per page:

1-10 of 141

References

customers.codesys.com/index.php?eID=dumpFile&t=f&f=17351&token=a7c02b2825fea2bcaf80c1a8e62097d72ec90f1a&download=

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

22.6%

JSON

Related for CVE-2022-22508

prion1