Lucene search

[email protected]NVD:CVE-2022-47391

HistoryMay 15, 2023 - 10:15 a.m.

CVE-2022-47391

2023-05-1510:15:10

CWE-20

[email protected]

web.nvd.nist.gov

codesys

unauthorized

input validation

denial of service

cve-2022-47391

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

52.1%

JSON

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.

Affected configurations

Nvd

Node

codesyscontrol_for_beaglebone_slRange<4.7.0.0

codesyscontrol_for_empc-a\/imx6_slRange<4.7.0.0

codesyscontrol_for_iot2000_slRange<4.7.0.0

codesyscontrol_for_linux_slRange<4.7.0.0

codesyscontrol_for_pfc100_slRange<4.7.0.0

codesyscontrol_for_pfc200_slRange<4.7.0.0

codesyscontrol_for_plcnext_slRange<4.7.0.0

codesyscontrol_for_raspberry_pi_slRange<4.7.0.0

codesyscontrol_for_wago_touch_panels_600_slRange<4.7.0.0

codesyscontrol_rte_\(for_beckhoff_cx\)_slRange<3.5.18.40

codesyscontrol_rte_\(sl\)Range<3.5.18.40

codesyscontrol_runtime_system_toolkitRange<3.5.18.40

codesyscontrol_win_\(sl\)Range<3.5.18.40

codesyshmi_\(sl\)Range<3.5.18.40

VendorProductVersionCPE
codesyscontrol_for_beaglebone_sl*cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_empc-a\/imx6_sl*cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_iot2000_sl*cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_linux_sl*cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc100_sl*cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_pfc200_sl*cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_plcnext_sl*cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_raspberry_pi_sl*cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
codesyscontrol_for_wago_touch_panels_600_sl*cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*
codesyscontrol_rte_\(for_beckhoff_cx\)_sl*cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
codesys	control_for_beaglebone_sl	*	cpe:2.3:a:codesys:control_for_beaglebone_sl::::::::
codesys	control_for_empc-a\/imx6_sl	*	cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl::::::::
codesys	control_for_iot2000_sl	*	cpe:2.3:a:codesys:control_for_iot2000_sl::::::::
codesys	control_for_linux_sl	*	cpe:2.3:a:codesys:control_for_linux_sl::::::::
codesys	control_for_pfc100_sl	*	cpe:2.3:a:codesys:control_for_pfc100_sl::::::::
codesys	control_for_pfc200_sl	*	cpe:2.3:a:codesys:control_for_pfc200_sl::::::::
codesys	control_for_plcnext_sl	*	cpe:2.3:a:codesys:control_for_plcnext_sl::::::::
codesys	control_for_raspberry_pi_sl	*	cpe:2.3:a:codesys:control_for_raspberry_pi_sl::::::::
codesys	control_for_wago_touch_panels_600_sl	*	cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl::::::::
codesys	control_rte_\(for_beckhoff_cx\)_sl	*	cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl::::::::