Lucene search

[email protected]CVE-2022-30791

HistoryJul 11, 2022 - 11:15 a.m.

CVE-2022-30791

2022-07-1111:15:08

CWE-400

[email protected]

web.nvd.nist.gov

codesys

cmpblkdrvtcp

resource consumption

cve-2022-30791

unauthorized attacker

tcp connections

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

Affected configurations

NVD

Node

codesyscontrol_for_beagleboneRange<4.5.0.0

codesyscontrol_for_empc-a\/imx6Range<4.5.0.0

codesyscontrol_for_iot2000_slRange<4.6.0.0

codesyscontrol_for_linux_slRange<4.5.0.0

codesyscontrol_for_pfc100_slRange<4.5.0.0

codesyscontrol_for_pfc200_slRange<4.5.0.0

codesyscontrol_for_plcnextRange<4.6.0.0

codesyscontrol_for_raspberry_pi_slRange<4.5.0.0

codesyscontrol_for_wago_touch_panels_600Range<4.5.0.0

codesyscontrol_rte_slRange<3.5.18.20

codesyscontrol_rte_sl_\(for_beckhoff_cx\)Range<3.5.18.20

codesyscontrol_runtime_system_toolkitRange<3.5.18.20

codesyscontrol_winRange<3.5.18.20

codesysdevelopment_systemRange<3.5.18.20

codesysedge_gatewayRange<3.5.18.20windows

codesysedge_gatewayRange<4.5.0.0linux

codesysembedded_target_visu_toolkitRange<3.5.18.20

codesysgatewayRange<3.5.18.20

codesyshmiRange<3.5.18.20

codesysremote_target_visu_toolkitRange<3.5.18.20

CPENameOperatorVersion
codesys:control_for_beaglebonecodesys control for beaglebonelt4.5.0.0
codesys:control_for_empc-a\/imx6codesys control for empc-a/imx6lt4.5.0.0
codesys:control_for_iot2000_slcodesys control for iot2000 sllt4.6.0.0
codesys:control_for_linux_slcodesys control for linux sllt4.5.0.0
codesys:control_for_pfc100_slcodesys control for pfc100 sllt4.5.0.0
codesys:control_for_pfc200_slcodesys control for pfc200 sllt4.5.0.0
codesys:control_for_plcnextcodesys control for plcnextlt4.6.0.0
codesys:control_for_raspberry_pi_slcodesys control for raspberry pi sllt4.5.0.0
codesys:control_for_wago_touch_panels_600codesys control for wago touch panels 600lt4.5.0.0
codesys:control_rte_slcodesys control rte sllt3.5.18.20

CPE	Name	Operator	Version
codesys:control_for_beaglebone	codesys control for beaglebone	lt	4.5.0.0
codesys:control_for_empc-a\/imx6	codesys control for empc-a/imx6	lt	4.5.0.0
codesys:control_for_iot2000_sl	codesys control for iot2000 sl	lt	4.6.0.0
codesys:control_for_linux_sl	codesys control for linux sl	lt	4.5.0.0
codesys:control_for_pfc100_sl	codesys control for pfc100 sl	lt	4.5.0.0
codesys:control_for_pfc200_sl	codesys control for pfc200 sl	lt	4.5.0.0
codesys:control_for_plcnext	codesys control for plcnext	lt	4.6.0.0
codesys:control_for_raspberry_pi_sl	codesys control for raspberry pi sl	lt	4.5.0.0
codesys:control_for_wago_touch_panels_600	codesys control for wago touch panels 600	lt	4.5.0.0
codesys:control_rte_sl	codesys control rte sl	lt	3.5.18.20

Rows per page:

1-10 of 201

CNA Affected

[
  {
    "product": "CODESYS Control RTE (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control RTE (for Beckhoff CX) SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control Win (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Gateway",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Edge Gateway for Windows",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS HMI (SL)",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Development System V3",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.10",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control Runtime System Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Embedded Target Visu Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Remote Target Visu Toolkit",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V3.5.18.20",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for BeagleBone SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for Beckhoff CX9020 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for emPC-A/iMX6 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for IOT2000 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for Linux SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": " CODESYS Control for PFC100 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for PFC200 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for PLCnext SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for Raspberry Pi SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Control for WAGO Touch Panels 600 SL",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "CODESYS Edge Gateway for Linux",
    "vendor": "CODESYS",
    "versions": [
      {
        "lessThan": "V4.5.0.0",
        "status": "affected",
        "version": "V3",
        "versionType": "custom"
      }
    ]
  }
]

References

customers.codesys.com/index.php?eID=dumpFile&t=f&f=17128&token=bee4d8a57f19be289d623ec90135493b5f9179e3&download=

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

JSON

Related for CVE-2022-30791

prion1 cvelist1 nvd1