7.5

CVE-2022-30791

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Codesys ≫ Control For Beaglebone Version < 4.5.0.0
Codesys ≫ Control For Empc-a/imx6 Version < 4.5.0.0
Codesys ≫ Control For Iot2000 Sl Version < 4.6.0.0
Codesys ≫ Control For Linux Sl Version < 4.5.0.0
Codesys ≫ Control For Pfc100 Sl Version < 4.5.0.0
Codesys ≫ Control For Pfc200 Sl Version < 4.5.0.0
Codesys ≫ Control For Plcnext Version < 4.6.0.0
Codesys ≫ Control For Raspberry Pi Sl Version < 4.5.0.0
Codesys ≫ Control Rte Sl Version < 3.5.18.20
Codesys ≫ Control Rte Sl (for Beckhoff Cx) Version < 3.5.18.20
Codesys ≫ Control Runtime System Toolkit Version < 3.5.18.20
Codesys ≫ Control Win Version < 3.5.18.20
Codesys ≫ Development System Version < 3.5.18.20
Codesys ≫ Edge Gateway SwPlatformwindows Version < 3.5.18.20
Codesys ≫ Edge Gateway SwPlatformlinux Version < 4.5.0.0
Codesys ≫ Embedded Target Visu Toolkit Version < 3.5.18.20
Codesys ≫ Gateway Version < 3.5.18.20
Codesys ≫ Hmi Version < 3.5.18.20
Codesys ≫ Remote Target Visu Toolkit Version < 3.5.18.20
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.591
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
info@cert.vde.com 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.