Lucene search

[email protected]CVE-2022-47391

HistoryMay 15, 2023 - 10:15 a.m.

CVE-2022-47391

2023-05-1510:15:00

CWE-20

[email protected]

web.nvd.nist.gov

codesys

vulnerability

denial of service

cve-2022-47391

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.9%

JSON

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.

CPENameOperatorVersion
codesys:hmi_\(sl\)codesys hmi \(sl\)lt3.5.18.40
codesys:control_win_\(sl\)codesys control win \(sl\)lt3.5.18.40
codesys:control_runtime_system_toolkitcodesys control runtime system toolkitlt3.5.18.40
codesys:control_rte_\(sl\)codesys control rte \(sl\)lt3.5.18.40
codesys:control_rte_\(for_beckhoff_cx\)_slcodesys control rte \(for beckhoff cx\) sllt3.5.18.40
codesys:control_for_wago_touch_panels_600_slcodesys control for wago touch panels 600 sllt4.7.0.0
codesys:control_for_raspberry_pi_slcodesys control for raspberry pi sllt4.7.0.0
codesys:control_for_plcnext_slcodesys control for plcnext sllt4.7.0.0
codesys:control_for_pfc200_slcodesys control for pfc200 sllt4.7.0.0
codesys:control_for_pfc100_slcodesys control for pfc100 sllt4.7.0.0

CPE	Name	Operator	Version
codesys:hmi_\(sl\)	codesys hmi \(sl\)	lt	3.5.18.40
codesys:control_win_\(sl\)	codesys control win \(sl\)	lt	3.5.18.40
codesys:control_runtime_system_toolkit	codesys control runtime system toolkit	lt	3.5.18.40
codesys:control_rte_\(sl\)	codesys control rte \(sl\)	lt	3.5.18.40
codesys:control_rte_\(for_beckhoff_cx\)_sl	codesys control rte \(for beckhoff cx\) sl	lt	3.5.18.40
codesys:control_for_wago_touch_panels_600_sl	codesys control for wago touch panels 600 sl	lt	4.7.0.0
codesys:control_for_raspberry_pi_sl	codesys control for raspberry pi sl	lt	4.7.0.0
codesys:control_for_plcnext_sl	codesys control for plcnext sl	lt	4.7.0.0
codesys:control_for_pfc200_sl	codesys control for pfc200 sl	lt	4.7.0.0
codesys:control_for_pfc100_sl	codesys control for pfc100 sl	lt	4.7.0.0

Rows per page:

1-10 of 141

References

customers.codesys.com/index.php?eID=dumpFile&t=f&f=17555&token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da&download=

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.9 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

33.9%

JSON

Related for CVE-2022-47391

prion1 nessus1 mmpc1 mssecure1 thn1