IM
IronMonkey Threat Research

CVE-2022-4046 HIGH

Published: 2023-08-03 | Last Modified: 2024-11-21 | Status: Modified

Description

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Secondary

Exploitability Score: 2.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-119

Affected Products

Vendor Product Version Update Type
codesys control_for_beaglebone_sl * <built-in method update of dict object at 0x7e6110a54680> Application
codesys control_for_empc-a\/imx6_sl * <built-in method update of dict object at 0x7e6110a55440> Application
codesys control_for_iot2000_sl * <built-in method update of dict object at 0x7e60bb914d00> Application
codesys control_for_linux_sl * <built-in method update of dict object at 0x7e6110a57880> Application
codesys control_for_pfc100_sl * <built-in method update of dict object at 0x7e6110a55c00> Application
codesys control_for_pfc200_sl * <built-in method update of dict object at 0x7e6110a55d80> Application
codesys control_for_plcnext_sl * <built-in method update of dict object at 0x7e6110a57180> Application
codesys control_for_raspberry_pi_sl * <built-in method update of dict object at 0x7e6110a55880> Application
codesys control_for_wago_touch_panels_600_sl * <built-in method update of dict object at 0x7e6110a545c0> Application
codesys control_rte_sl * <built-in method update of dict object at 0x7e6110a55800> Application
codesys control_rte_sl_\(for_beckhoff_cx\) * <built-in method update of dict object at 0x7e60bb914c80> Application
codesys control_runtime_system_toolkit * <built-in method update of dict object at 0x7e6110a579c0> Application
codesys control_win_sl * <built-in method update of dict object at 0x7e60eb224700> Application
codesys hmi_sl * <built-in method update of dict object at 0x7e60eb227040> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:*
Yes cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*

References

Notification
Message here