NetSight
high8.1

CVE-2022-22515

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify t…

Impact

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

Affected products

VendorProductAffected versions
CodesysControl For Beaglebone Sl
before 4.5.0.0
CodesysControl For Beckhoff Cx9020
before 4.5.0.0
CodesysControl For Empc-A\/Imx6 Sl
before 4.5.0.0
CodesysControl For Iot2000 Sl
before 4.5.0.0
CodesysControl For Linux Sl
before 4.5.0.0
CodesysControl For Pfc100 Sl
before 4.5.0.0
CodesysControl For Pfc200 Sl
before 4.5.0.0
CodesysControl For Plcnext Sl
before 4.5.0.0
CodesysControl For Raspberry Pi Sl
before 4.5.0.0
CodesysControl For Wago Touch Panels 600 Sl
before 4.5.0.0
CodesysControl Rte Sl
before 3.5.18.0
CodesysControl Rte Sl \(For Beckhoff Cx\)
before 3.5.18.0

Weakness classification

References