Versio.io

CVE-2022-22515

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 07-04-2022 09:15
Last modified: - 12-05-2022 09:37
Total changes: - 5

Description

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Low
Attack complexity
Network
Attack vector
None
Availability
High
Confidentiality
High
Integrity
Low
Privileges required
Unchanged
Scope
None
User interaction
8.1
Base score
2.8
5.2
Exploitability score
Impact score
 

Verification logic

OR
vendor=codesys AND product=control_for_beaglebone_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_beckhoff_cx9020 AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_empc-a\/imx6_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_iot2000_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_linux_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_pfc100_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_pfc200_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_plcnext_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_raspberry_pi_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_wago_touch_panels_600_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_rte_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_rte_sl_\(for_beckhoff_cx\) AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_win_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_runtime_system_toolkit AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=embedded_target_visu_toolkit AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=hmi_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=remote_target_visu_toolkit AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=development_system AND versionStartIncluding=3.0 AND versionEndExcluding=3.5.18.0
 

Reference

 


Keywords

NVD

 

CVE-2022-22515

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.