medium6.5
CVE-2022-22518
A bug in CmpUserMgr component can lead to only partially applied security policies.
Impact
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Beckhoff Cx9020 | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Iot2000 Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Linux Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Pfc100 Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Pfc200 Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Raspberry Pi Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | from 4.4.0.0 before 4.5.0.0 |
| Codesys | Control Runtime System Toolkit | from 3.5.17.0 before 3.5.18.0 |