Versio.io

CVE-2022-22517

Common vulnerabilities & exposures (CVE)

CVE databaseCVE database blogpostRelease & EoL database
 
Published at: - 07-04-2022 09:15
Last modified: - 18-04-2022 03:19
Total changes: - 2

Description

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Low
Attack complexity
Network
Attack vector
High
Availability
None
Confidentiality
None
Integrity
None
Privileges required
Unchanged
Scope
None
User interaction
7.5
Base score
3.9
3.6
Exploitability score
Impact score
 

Verification logic

OR
vendor=codesys AND product=control_for_beaglebone_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_beckhoff_cx9020 AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_empc-a\/imx6_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_iot2000_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_linux_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_pfc100_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_pfc200_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_plcnext_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_raspberry_pi_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_for_wago_touch_panels_600_sl AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=control_rte_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_rte_sl_\(for_beckhoff_cx\) AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_runtime_system_toolkit AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=control_win_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=development_system AND versionStartIncluding=3.0 AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=edge_gateway AND target_software=windows AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=edge_gateway AND target_software=linux AND versionEndExcluding=4.5.0.0
vendor=codesys AND product=embedded_target_visu_toolkit AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=gateway AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=hmi_sl AND versionEndExcluding=3.5.18.0
vendor=codesys AND product=remote_target_visu_toolkit AND versionEndExcluding=3.5.18.0
 

Reference

 


Keywords

NVD

 

CVE-2022-22517

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures

 

We use cookies to ensure that we give you the best experience on our website. Read privacy policies for more information.