High severity · published Apr 7, 2022
CVE-2022-22515
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration…
8.1
CVSS
1.1%
EPSS
No
On KEV
Description
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Control For Beaglebone SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Beckhoff Cx9020 · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Empc-a/imx6 SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Iot2000 SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Linux SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Pfc100 SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Pfc200 SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Plcnext SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Raspberry PI SL · Codesys
before 4.5.0.0 · source: NVD
CF
Control For Wago Touch Panels 600 SL · Codesys
before 4.5.0.0 · source: NVD
CR
Control Rte SL · Codesys
before 3.5.18.0 · source: NVD
CR
Control Rte SL (for Beckhoff Cx) · Codesys
before 3.5.18.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-22515
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-22515
Vendor Advisory
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17089&token=cc5041e24fc744a397a6f6e3b78200a40e6fcd53&download=
More from Control For Beaglebone SL
9.8
CVE-2019-9010
An issue was discovered in 3S-Smart CODESYS V3 products
9.8
CVE-2018-10612
In 3S-Smart Software Solutions GmbH CODESYS Control V3 products prior to version 3.5.14.0, user access management and communication encryption is not enabled by default, which…
8.8
CVE-2023-6357
A low-privileged remote attacker could exploit the vulnerability and inject additional system commands via file system libraries which could give the attacker full control of the…
8.8
CVE-2022-4046
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access…
8.8
CVE-2022-47390
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write…