high7.5
CVE-2022-22519
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the C…
Impact
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | before 4.5.0.0 |
| Codesys | Control For Beckhoff Cx9020 | before 4.5.0.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | before 4.5.0.0 |
| Codesys | Control For Iot2000 Sl | before 4.5.0.0 |
| Codesys | Control For Linux Sl | before 4.5.0.0 |
| Codesys | Control For Pfc100 Sl | before 4.5.0.0 |
| Codesys | Control For Pfc200 Sl | before 4.5.0.0 |
| Codesys | Control For Plcnext Sl | before 4.5.0.0 |
| Codesys | Control For Raspberry Pi Sl | before 4.5.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | before 4.5.0.0 |
| Codesys | Control Rte Sl | before 3.5.18.0 |
| Codesys | Control Rte Sl \(For Beckhoff Cx\) | before 3.5.18.0 |