NetSight
medium6.5

CVE-2022-22513

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.

Impact

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.

Affected products

VendorProductAffected versions
CodesysControl For Beaglebone Sl
before 4.5.0.0
CodesysControl For Beckhoff Cx9020
before 4.5.0.0
CodesysControl For Empc-A\/Imx6 Sl
before 4.5.0.0
CodesysControl For Iot2000 Sl
before 4.5.0.0
CodesysControl For Linux Sl
before 4.5.0.0
CodesysControl For Pfc100 Sl
before 4.5.0.0
CodesysControl For Pfc200 Sl
before 4.5.0.0
CodesysControl For Plcnext Sl
before 4.5.0.0
CodesysControl For Raspberry Pi Sl
before 4.5.0.0
CodesysControl For Wago Touch Panels 600 Sl
before 4.5.0.0
CodesysControl Rte Sl
before 3.5.18.0
CodesysControl Rte Sl \(For Beckhoff Cx\)
before 3.5.18.0

Weakness classification

References