CVE-2022-22517

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

• codesys control for beaglebone sl (< 4.5.0.0) • codesys control for beckhoff cx9020 (< 4.5.0.0) • codesys control for empc-a\/imx6 sl (< 4.5.0.0) • codesys control for iot2000 sl (< 4.5.0.0) • codesys control for linux sl (< 4.5.0.0) • codesys control for pfc100 sl (< 4.5.0.0) • codesys control for pfc200 sl (< 4.5.0.0) • codesys control for plcnext sl (< 4.5.0.0) • codesys control for raspberry pi sl (< 4.5.0.0) • codesys control for wago touch panels 600 sl (< 4.5.0.0) • codesys control rte sl (< 3.5.18.0) • codesys control rte sl \(for beckhoff cx\) (< 3.5.18.0) • codesys control runtime system toolkit (< 3.5.18.0) • codesys control win sl (< 3.5.18.0) • codesys development system (>= 3.0 < 3.5.18.0) • codesys edge gateway (< 3.5.18.0) • codesys edge gateway (< 4.5.0.0) • codesys embedded target visu toolkit (< 3.5.18.0) • codesys gateway (< 3.5.18.0) • codesys hmi sl (< 3.5.18.0) • codesys remote target visu toolkit (< 3.5.18.0)