Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2022-22519

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Beckhoff Cx9020 Control For Empc-a\/imx6 Sl and 15 more
CVE-2022-22517

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Beckhoff Cx9020 Control For Empc-a\/imx6 Sl and 17 more
CVE-2022-22515

A component of the CODESYS Control runtime system allows read and write access to configuration files

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

CVSS 3.1 · 8.1 High EPSS 1.3% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Beckhoff Cx9020 Control For Empc-a\/imx6 Sl and 15 more
CVE-2022-22514

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.

CVSS 3.1 · 7.1 High EPSS 1.0% KEV · Not listed
Vendors
Codesys
Products
Control For Beaglebone Sl Control For Beckhoff Cx9020 Control For Empc-a\/imx6 Sl and 17 more