Vulnerabilities

TI-2022-06793 CVE-2022-22517 · GHSA-95jh-v98h-7gww

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

LOW 36

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01522 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-334

TI-2022-06790 CVE-2022-22514 · GHSA-5j8x-4qfw-cwj9

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

LOW 33

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.01036 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-822

TI-2022-06789 CVE-2022-22513 · GHSA-4555-4gmg-wpcm

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.

LOW 31

An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01206 Published 2022-04-07 Fixed in V3.5.18.0, V4.5.0.0 CWE-476

Vulnerabilities

Filters

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

Null Pointer Dereference in multiple CODESYS products can lead to a DoS.