NetSight
high8.8

CVE-2022-4224

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS re…

Impact

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

Affected products

VendorProductAffected versions
CodesysControl For Beaglebone Sl
from 3.0 before 4.8.0.0
CodesysControl For Empc-A\/Imx6 Sl
from 3.0 before 4.8.0.0
CodesysControl For Iot2000 Sl
from 3.0 before 4.8.0.0
CodesysControl For Linux Sl
from 3.0 before 4.8.0.0
CodesysControl For Pfc100 Sl
from 3.0 before 4.8.0.0
CodesysControl For Pfc200 Sl
from 3.0 before 4.8.0.0
CodesysControl For Plcnext Sl
from 3.0 before 4.8.0.0
CodesysControl For Raspberry Pi Sl
from 3.0 before 4.8.0.0
CodesysControl For Wago Touch Panels 600 Sl
from 3.0 before 4.8.0.0
CodesysControl Rte Sl
from 3.0 before 3.5.19.0
CodesysControl Rte Sl \(For Beckhoff Cx\)
from 3.0 before 3.5.19.0
CodesysControl Win Sl
from 3.0 before 3.5.19.0

Weakness classification

References