|
2023-05-15
|
CVE-2022-47378
|
Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
6.5
|
|
|
|
2023-05-15
|
CVE-2022-47392
|
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
6.5
|
|
|
|
2023-05-15
|
CVE-2022-4048
|
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
|
Development_system_v3
|
7.7
|
|
|
|
2023-05-15
|
CVE-2022-47379
|
An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47380
|
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47382
|
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47381
|
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47383
|
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47384
|
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|
|
2023-05-15
|
CVE-2022-47385
|
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
|
Control_for_beaglebone_sl, Control_for_empc\-A\/imx6_sl, Control_for_iot2000_sl, Control_for_linux_sl, Control_for_pfc100_sl, Control_for_pfc200_sl, Control_for_plcnext_sl, Control_for_raspberry_pi_sl, Control_for_wago_touch_panels_600_sl, Control_rte_\(For_beckhoff_cx\)_sl, Control_rte_\(Sl\), Control_runtime_system_toolkit, Control_win_\(Sl\), Development_system_v3, Hmi_\(Sl\), Safety_sil2_psp, Safety_sil2_runtime_toolkit
|
8.8
|
|
|