Search criteria

57 vulnerabilities found for development_system_v3 by codesys

FKIE_CVE-2022-47392

Vulnerability from fkie_nvd - Published: 2023-05-15 11:15 - Updated: 2025-07-17 13:10
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead\u00a0to a denial-of-service condition."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de validaci\u00f3n de entrada incorrecta en los componentes CmpApp/CmpAppBP/CmpAppForce de m\u00faltiples productos CODESYS en m\u00faltiples versiones para leer desde una direcci\u00f3n no v\u00e1lida, lo que puede conducir a una condici\u00f3n de denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2022-47392",
  "lastModified": "2025-07-17T13:10:35.760",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T11:15:08.750",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47393

Vulnerability from fkie_nvd - Published: 2023-05-15 11:15 - Updated: 2025-07-17 13:11
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de restricci\u00f3n inadecuada de operaciones dentro de los l\u00edmites de un b\u00fafer de memoria en m\u00faltiples versiones de m\u00faltiples productos CODESYS para forzar una situaci\u00f3n de denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2022-47393",
  "lastModified": "2025-07-17T13:11:12.280",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T11:15:08.820",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47387

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:05
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los l\u00edmites basada en pila en el componente CmpTraceMgr de m\u00faltiples productos CODESYS en m\u00faltiples versiones para escribir datos en la pila, lo que puede provocar una condici\u00f3n de denegaci\u00f3n de servicio, sobrescritura de memoria o ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2022-47387",
  "lastModified": "2025-07-17T13:05:21.360",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.067",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-4048

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2024-11-21 07:34
Severity ?
7.7 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
7.7 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Summary
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17350&token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys development_system_v3 *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E14B190D-FE8A-463E-AB8A-FAC59F375CC9",
              "versionEndExcluding": "3.5.18.40",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application."
    }
  ],
  "id": "CVE-2022-4048",
  "lastModified": "2024-11-21T07:34:30.583",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.2,
        "source": "info@cert.vde.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.517",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17350\u0026token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17350\u0026token=2cee62285d3ec76d6a78dfa9b9e81e66f6136a2a\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-326"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47391

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:10
Severity ?
7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Summary
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17555&token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17555&token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service."
    },
    {
      "lang": "es",
      "value": "En varios productos CODESYS en m\u00faltiples versiones, un atacante remoto no autorizado puede usar una vulnerabilidad de validaci\u00f3n de entrada incorrecta para leer direcciones no v\u00e1lidas, lo que provoca una denegaci\u00f3n de servicio."
    }
  ],
  "id": "CVE-2022-47391",
  "lastModified": "2025-07-17T13:10:20.353",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.390",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47388

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:09
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los l\u00edmites basada en la pila en el componente CmpTraceMgr de m\u00faltiples productos CODESYS en m\u00faltiples versiones para escribir datos en la pila, lo que puede provocar una condici\u00f3n de denegaci\u00f3n de servicio, sobrescritura de memoria o ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2022-47388",
  "lastModified": "2025-07-17T13:09:43.000",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.157",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47389

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:09
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los l\u00edmites basada en la pila en el componente CmpTraceMgr de m\u00faltiples productos CODESYS en m\u00faltiples versiones para escribir datos en la pila, lo que puede provocar una condici\u00f3n de denegaci\u00f3n de servicio, sobrescritura de memoria o ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2022-47389",
  "lastModified": "2025-07-17T13:09:56.670",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.243",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47390

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:10
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los l\u00edmites basada en la pila en el componente CmpTraceMgr de m\u00faltiples productos CODESYS en m\u00faltiples versiones para escribir datos en la pila, lo que puede provocar una condici\u00f3n de denegaci\u00f3n de servicio, sobrescritura de memoria o ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2022-47390",
  "lastModified": "2025-07-17T13:10:11.830",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:10.327",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47380

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:46
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated remote attacker may use a stack based\u00a0 out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47380",
  "lastModified": "2025-07-17T12:46:06.383",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.607",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47383

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:56
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47383",
  "lastModified": "2025-07-17T12:56:32.877",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.803",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47381

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:46
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47381",
  "lastModified": "2025-07-17T12:46:26.603",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.667",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47386

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:02
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    },
    {
      "lang": "es",
      "value": "Un atacante remoto autenticado puede usar una vulnerabilidad de escritura fuera de los l\u00edmites basada en la pila en el componente CmpTraceMgr de m\u00faltiples productos CODESYS en m\u00faltiples versiones para escribir datos en la pila, lo que puede provocar una condici\u00f3n de denegaci\u00f3n de servicio, sobrescritura de memoria o ejecuci\u00f3n remota de c\u00f3digo."
    }
  ],
  "id": "CVE-2022-47386",
  "lastModified": "2025-07-17T13:02:11.490",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.993",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47379

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:38
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47379",
  "lastModified": "2025-07-17T12:38:27.903",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.530",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47382

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:50
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47382",
  "lastModified": "2025-07-17T12:50:47.377",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.737",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47385

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:02
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47385",
  "lastModified": "2025-07-17T13:02:02.717",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.927",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47384

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 13:01
Severity ?
8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
    }
  ],
  "id": "CVE-2022-47384",
  "lastModified": "2025-07-17T13:01:49.327",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 8.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.9,
        "source": "info@cert.vde.com",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.863",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2022-47378

Vulnerability from fkie_nvd - Published: 2023-05-15 10:15 - Updated: 2025-07-17 12:38
Severity ?
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition.
References
info@cert.vde.comhttps://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=Vendor Advisory
Impacted products
Vendor Product Version
codesys control_for_beaglebone_sl *
codesys control_for_empc-a\/imx6_sl *
codesys control_for_iot2000_sl *
codesys control_for_linux_sl *
codesys control_for_pfc100_sl *
codesys control_for_pfc200_sl *
codesys control_for_plcnext_sl *
codesys control_for_raspberry_pi_sl *
codesys control_for_wago_touch_panels_600_sl *
codesys control_rte_\(for_beckhoff_cx\)_sl *
codesys control_rte_\(sl\) *
codesys control_runtime_system_toolkit *
codesys control_win_\(sl\) *
codesys development_system_v3 *
codesys hmi_\(sl\) *
codesys safety_sil2_psp *
codesys safety_sil2_runtime_toolkit *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2A50DA7-2372-470C-A4DD-29837A4D428A",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ADC5883-5087-45E0-95E2-3D414C6417DF",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7178B980-82CC-4A30-B278-A4D1F319D678",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AFD0474-DCBC-4F9E-BE1B-7BDCCB9D801F",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "61D99F13-9297-4812-90AD-3EB43276D344",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5F2E302-39C1-4674-A2BE-A6D1D761B4E2",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF8FBED1-D729-4E07-A644-70D8FC87E965",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00EF8A8D-8A5F-4E7B-A14A-BFEE3297E3B5",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AA9F089-875B-4A90-A818-1BD06602D7E4",
              "versionEndExcluding": "4.8.0.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(for_beckhoff_cx\\)_sl:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1A18AA8-CDF4-4664-906F-76060AFED925",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_rte_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "725E570C-6F46-4526-90B5-F4CAF70A7688",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD993BD6-B52E-4BA7-A7D7-A0EBE7FDEDEF",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:control_win_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FBA9CDA8-4FA0-4258-B477-D2C8DBDD8B2F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC41CB40-21CD-4621-9B23-9BF8E0AE93E3",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:hmi_\\(sl\\):*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C664BC1C-889F-4A54-8E81-AB60B0D4D93B",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "49220E0D-3DD6-492B-BD58-C4951D7D2B75",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDF04E45-90A5-47FB-8101-9A56BD4F9C3F",
              "versionEndExcluding": "3.5.19.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition."
    }
  ],
  "id": "CVE-2022-47378",
  "lastModified": "2025-07-17T12:38:13.340",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "info@cert.vde.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-05-15T10:15:09.460",
  "references": [
    {
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
    }
  ],
  "sourceIdentifier": "info@cert.vde.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "info@cert.vde.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2022-47393 (GCVE-0-2022-47393)

Vulnerability from cvelistv5 – Published: 2023-05-15 10:03 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
Severity ?
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47393",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:02.605164Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:25.695Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation."
            }
          ],
          "value": "An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T10:03:58.680Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to improperly restricted memory operations",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47393",
    "datePublished": "2023-05-15T10:03:58.680Z",
    "dateReserved": "2022-12-14T06:03:27.266Z",
    "dateUpdated": "2025-03-05T18:59:25.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47392 (GCVE-0-2022-47392)

Vulnerability from cvelistv5 – Published: 2023-05-15 10:01 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
Severity ?
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:06.722632Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:32.783Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead\u0026nbsp;to a denial-of-service condition."
            }
          ],
          "value": "An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead\u00a0to a denial-of-service condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T10:01:09.224Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to Improper Input Validation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47392",
    "datePublished": "2023-05-15T10:01:09.224Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:32.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47391 (GCVE-0-2022-47391)

Vulnerability from cvelistv5 – Published: 2023-05-15 09:59 – Updated: 2025-01-23 19:19
VLAI?
Summary
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
Severity ?
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Edge Gateway for Windows Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Gateway Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Edge Gateway for Linux Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.901Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47391",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-23T19:18:44.576335Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-23T19:19:22.826Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Edge Gateway for Windows",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Gateway",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Edge Gateway for Linux",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service."
            }
          ],
          "value": "In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:59:52.803Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to Improper Input Validation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47391",
    "datePublished": "2023-05-15T09:59:52.803Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-01-23T19:19:22.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47390 (GCVE-0-2022-47390)

Vulnerability from cvelistv5 – Published: 2023-05-15 09:58 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47390",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:15.103519Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:40.115Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:58:21.588Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47390",
    "datePublished": "2023-05-15T09:58:21.588Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:40.115Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47389 (GCVE-0-2022-47389)

Vulnerability from cvelistv5 – Published: 2023-05-15 09:57 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47389",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:17.996509Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:49.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:57:37.177Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47389",
    "datePublished": "2023-05-15T09:57:37.177Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:49.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47388 (GCVE-0-2022-47388)

Vulnerability from cvelistv5 – Published: 2023-05-15 09:56 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.136Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:20.872432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:57.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:56:43.518Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47388",
    "datePublished": "2023-05-15T09:56:43.518Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:57.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47387 (GCVE-0-2022-47387)

Vulnerability from cvelistv5 – Published: 2023-05-15 09:54 – Updated: 2025-03-05 19:00
VLAI?
Summary
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47387",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:24.928624Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T19:00:07.443Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:54:41.625Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47387",
    "datePublished": "2023-05-15T09:54:41.625Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T19:00:07.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47393 (GCVE-0-2022-47393)

Vulnerability from nvd – Published: 2023-05-15 10:03 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
Severity ?
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47393",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:02.605164Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:25.695Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation."
            }
          ],
          "value": "An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T10:03:58.680Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to improperly restricted memory operations",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47393",
    "datePublished": "2023-05-15T10:03:58.680Z",
    "dateReserved": "2022-12-14T06:03:27.266Z",
    "dateUpdated": "2025-03-05T18:59:25.695Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47392 (GCVE-0-2022-47392)

Vulnerability from nvd – Published: 2023-05-15 10:01 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.
Severity ?
6.5 (Medium)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.701Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:06.722632Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:32.783Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead\u0026nbsp;to a denial-of-service condition."
            }
          ],
          "value": "An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead\u00a0to a denial-of-service condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T10:01:09.224Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to Improper Input Validation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47392",
    "datePublished": "2023-05-15T10:01:09.224Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:32.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47391 (GCVE-0-2022-47391)

Vulnerability from nvd – Published: 2023-05-15 09:59 – Updated: 2025-01-23 19:19
VLAI?
Summary
In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
Severity ?
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE
  • CWE-20 - Improper Input Validation
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Edge Gateway for Windows Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Gateway Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Edge Gateway for Linux Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.901Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47391",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-23T19:18:44.576335Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-23T19:19:22.826Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Edge Gateway for Windows",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Gateway",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "modules": [
            "CmpDevice"
          ],
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Edge Gateway for Linux",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service."
            }
          ],
          "value": "In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:59:52.803Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17555\u0026token=212fc7e39bdd260cab6d6ca84333d42f50bcb3da\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to Improper Input Validation",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47391",
    "datePublished": "2023-05-15T09:59:52.803Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-01-23T19:19:22.826Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47390 (GCVE-0-2022-47390)

Vulnerability from nvd – Published: 2023-05-15 09:58 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:07.994Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47390",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:15.103519Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:40.115Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:58:21.588Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47390",
    "datePublished": "2023-05-15T09:58:21.588Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:40.115Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47389 (GCVE-0-2022-47389)

Vulnerability from nvd – Published: 2023-05-15 09:57 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.296Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47389",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:17.996509Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:49.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:57:37.177Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47389",
    "datePublished": "2023-05-15T09:57:37.177Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:49.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2022-47388 (GCVE-0-2022-47388)

Vulnerability from nvd – Published: 2023-05-15 09:56 – Updated: 2025-03-05 18:59
VLAI?
Summary
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Severity ?
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Assigner
References
Impacted products
Vendor Product Version
CODESYS CODESYS Control RTE (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control RTE (for Beckhoff CX) SL Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Win (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control Runtime System Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 Runtime Toolkit Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Safety SIL2 PSP Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS HMI (SL) Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Development System V3 Affected: V0.0.0.0 , < V3.5.19.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for BeagleBone SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for emPC-A/iMX6 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for IOT2000 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Linux SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC100 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PFC200 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for PLCnext SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for Raspberry Pi SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
    CODESYS CODESYS Control for WAGO Touch Panels 600 SL Affected: V0.0.0.0 , < V4.8.0.0 (semver)
Create a notification for this product.
Credits
Vladimir Tokarev, Microsoft
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T14:55:08.136Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-47388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-05T18:37:20.872432Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-05T18:59:57.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control RTE (for Beckhoff CX) SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Win (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control Runtime System Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 Runtime Toolkit",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Safety SIL2 PSP",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS HMI (SL)",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Development System V3",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V3.5.19.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for BeagleBone SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for emPC-A/iMX6 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for IOT2000 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Linux SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC100 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PFC200 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for PLCnext SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for Raspberry Pi SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CODESYS Control for WAGO Touch Panels 600 SL",
          "vendor": "CODESYS",
          "versions": [
            {
              "lessThan": "V4.8.0.0",
              "status": "affected",
              "version": "V0.0.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Vladimir Tokarev, Microsoft"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u0026nbsp;to a denial-of-service condition, memory overwriting, or remote code execution."
            }
          ],
          "value": "An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00a0to a denial-of-service condition, memory overwriting, or remote code execution."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-05-15T09:56:43.518Z",
        "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
        "shortName": "CERTVDE"
      },
      "references": [
        {
          "url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17554\u0026token=5444f53b4c90fe37043671a100dffa75305d1825\u0026download="
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "CODESYS: Multiple products prone to stack based out-of-bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
    "assignerShortName": "CERTVDE",
    "cveId": "CVE-2022-47388",
    "datePublished": "2023-05-15T09:56:43.518Z",
    "dateReserved": "2022-12-14T06:03:27.265Z",
    "dateUpdated": "2025-03-05T18:59:57.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}