2 lines
8.6 KiB
JSON
2 lines
8.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Control RTE (SL) ","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control RTE (for Beckhoff CX) SL","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control Win (SL)","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":" Runtime Toolkit ","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Safety SIL2 Runtime Toolkit","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Safety SIL2 PSP","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"HMI (SL) ","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Development System V3","vendor":"CODESYS","versions":[{"lessThan":"3.5.19.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":" Control for BeagleBone SL ","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for emPC-A/iMX6 SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for IOT2000 SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for Linux SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":" Control for PFC100 SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":" Control for PFC200 SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for PLCnext SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for Raspberry Pi SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Control for WAGO Touch Panels 600 SL","vendor":"CODESYS","versions":[{"lessThan":"4.8.0.0","status":"affected","version":"3.0.0.0","versionType":"custom"}]}],"source":"info@cert.vde.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"40CAED29-E204-459D-8AFC-F814E68FAB9A","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"C5E9691E-E67A-4D59-9152-3731DD381CF4","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"A5FC8BEB-DB37-4486-BAFD-16B82F331F9C","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"D2821B72-748A-4B3E-BD8B-E55C92A1A166","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"680C2604-3774-43D2-9DDE-38A0F593BFF3","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"D4B2CB47-68F3-4C17-8D61-88F655CF19ED","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"6E3514C8-F513-4576-8F6D-DDB193E3B947","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"5059640A-05F0-4D59-9682-BC09F155527C","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"D7D13CFF-F753-430B-9E03-F3F24066B529","versionEndExcluding":"4.8.0.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"C27B4D20-FDE3-4003-97BD-F43EE147AD6A","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_rte_sl_\\(for_beckhoff_cx\\):*:*:*:*:*:*:*:*","matchCriteriaId":"63A8AFF5-3CC8-43FA-A9D3-A6A53FAF15FC","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"A1A44FED-CFBB-454A-B8E8-FC11A996488F","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*","matchCriteriaId":"8297903A-80E1-4FA7-B552-672B94B6B6B4","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*","matchCriteriaId":"57C60464-F6BB-431A-AD96-32B07FD99948","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:*:*","matchCriteriaId":"0032B82B-21B9-4006-A7E4-CD5B92962136","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true},{"criteria":"cpe:2.3:a:codesys:safety_sil2:*:*:*:*:*:*:*:*","matchCriteriaId":"B7181873-775F-43A6-BDBB-DBB2879C7D4D","versionEndExcluding":"3.5.19.0","versionStartIncluding":"3.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device."}],"id":"CVE-2022-4224","lastModified":"2026-06-17T05:20:18.343","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"info@cert.vde.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2022-4224","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-29T14:07:26.160566Z","version":"2.0.3"}}]},"published":"2023-03-23T12:15:12.990","references":[{"source":"info@cert.vde.com","tags":["Vendor Advisory"],"url":"https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download="},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17553&token=cf49757d232ea8021f0c0dd6c65e71ea5942b12d&download="}],"sourceIdentifier":"info@cert.vde.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-1188"}],"source":"info@cert.vde.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-1188"}],"source":"nvd@nist.gov","type":"Secondary"}]}
|