6.5

CVE-2022-47393

CODESYS: Multiple products prone to improperly restricted memory operations

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Codesys ≫ Control For Beaglebone Sl Version < 4.8.0.0
Codesys ≫ Control For Iot2000 Sl Version < 4.8.0.0
Codesys ≫ Control For Linux Sl Version < 4.8.0.0
Codesys ≫ Control For Pfc100 Sl Version < 4.8.0.0
Codesys ≫ Control For Pfc200 Sl Version < 4.8.0.0
Codesys ≫ Control For Plcnext Sl Version < 4.8.0.0
Codesys ≫ Control For Raspberry Pi Sl Version < 4.8.0.0
Codesys ≫ Control Runtime System Toolkit Version < 3.5.19.0
Codesys ≫ Development System V3 Version < 3.5.19.0
Codesys ≫ Safety Sil2 Psp Version < 3.5.19.0
Codesys ≫ Safety Sil2 Runtime Toolkit Version < 3.5.19.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.98% 0.575
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
info@cert.vde.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17554&token=5444f53b4c90fe37043671a100dffa75305d1825&download=
Vendor Advisory