CVEvulnerability

CVE-2022-22516

7.8 HIGH Published 2022-04-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-732

Description

The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.

Affected configurations

• codesys control rte sl (< 3.5.18.0) • codesys control rte sl \(for beckhoff cx\) (< 3.5.18.0) • codesys control win sl (< 3.5.18.0) • codesys development system (< 3.5.18.0)

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References