Vulnerabilities

TI-2022-06795 CVE-2022-22519 · GHSA-cx43-qj46-j7wr

Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.

LOW 36

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01682 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-126

TI-2022-06794 CVE-2022-22518 · GHSA-m3jp-v66f-7qcp

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.

LOW 30

A bug in CmpUserMgr component can lead to only partially applied security policies.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0061 Published 2022-04-07 Fixed in V4.5.0.0, V3.5.18.0 CWE-276

TI-2022-06793 CVE-2022-22517 · GHSA-95jh-v98h-7gww

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

LOW 36

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01522 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-334

TI-2022-06790 CVE-2022-22514 · GHSA-5j8x-4qfw-cwj9

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

LOW 33

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01036 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-822

TI-2022-06789 CVE-2022-22513 · GHSA-4555-4gmg-wpcm

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.

LOW 31

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01206 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-476