CVE-2022-4224

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download=	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:codesys:control_for_beaglebone_sl::::::::
	cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl::::::::
	cpe:2.3:a:codesys:control_for_iot2000_sl::::::::
	cpe:2.3:a:codesys:control_for_linux_sl::::::::
	cpe:2.3:a:codesys:control_for_pfc100_sl::::::::
	cpe:2.3:a:codesys:control_for_pfc200_sl::::::::
	cpe:2.3:a:codesys:control_for_plcnext_sl::::::::
	cpe:2.3:a:codesys:control_for_raspberry_pi_sl::::::::
	cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl::::::::
	cpe:2.3:a:codesys:control_rte_sl::::::::
	cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\)::::::::
	cpe:2.3:a:codesys:control_win_sl::::::::
	cpe:2.3:a:codesys:development_system::::::::
	cpe:2.3:a:codesys:hmi_sl::::::::
	cpe:2.3:a:codesys:runtime_toolkit::::::::
	cpe:2.3:a:codesys:safety_sil2::::::::

History

No history.

Information

Published : 2023-03-23 12:15

Updated : 2024-02-01 15:11

NVD link : CVE-2022-4224

Mitre link : CVE-2022-4224

CVE.ORG link : CVE-2022-4224

JSON object : View

Products Affected

codesys

control_for_pfc200_sl
control_for_pfc100_sl
control_for_plcnext_sl
control_for_iot2000_sl
control_for_empc-a\/imx6_sl
runtime_toolkit
hmi_sl
control_rte_sl_\(for_beckhoff_cx\)
control_rte_sl
development_system
control_for_linux_sl
control_for_wago_touch_panels_600_sl
safety_sil2
control_for_raspberry_pi_sl
control_for_beaglebone_sl
control_win_sl

CWE

CWE-1188

Initialization of a Resource with an Insecure Default

{"id": "CVE-2022-4224", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "info@cert.vde.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-03-23T12:15:12.990", "references": [{"url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download=", "tags": ["Vendor Advisory"], "source": "info@cert.vde.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-1188"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-1188"}]}], "descriptions": [{"lang": "en", "value": "In multiple products of CODESYS v3 in multiple versions a remote low privileged user\u00a0could utilize this vulnerability to read and modify system files and OS resources or DoS the device."}], "lastModified": "2024-02-01T15:11:55.377", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40CAED29-E204-459D-8AFC-F814E68FAB9A", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5E9691E-E67A-4D59-9152-3731DD381CF4", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5FC8BEB-DB37-4486-BAFD-16B82F331F9C", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2821B72-748A-4B3E-BD8B-E55C92A1A166", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "680C2604-3774-43D2-9DDE-38A0F593BFF3", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4B2CB47-68F3-4C17-8D61-88F655CF19ED", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E3514C8-F513-4576-8F6D-DDB193E3B947", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5059640A-05F0-4D59-9682-BC09F155527C", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7D13CFF-F753-430B-9E03-F3F24066B529", "versionEndExcluding": "4.8.0.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C27B4D20-FDE3-4003-97BD-F43EE147AD6A", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_rte_sl_\\(for_beckhoff_cx\\):*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63A8AFF5-3CC8-43FA-A9D3-A6A53FAF15FC", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1A44FED-CFBB-454A-B8E8-FC11A996488F", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8297903A-80E1-4FA7-B552-672B94B6B6B4", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57C60464-F6BB-431A-AD96-32B07FD99948", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0032B82B-21B9-4006-A7E4-CD5B92962136", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7181873-775F-43A6-BDBB-DBB2879C7D4D", "versionEndExcluding": "3.5.19.0", "versionStartIncluding": "3.0"}], "operator": "OR"}]}], "sourceIdentifier": "info@cert.vde.com"}