CVEvulnerability

CVE-2022-30792

7.5 HIGH Published 2022-07-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Affected configurations

• codesys control for beaglebone (< 4.5.0.0) • codesys control for empc-a\/imx6 (< 4.5.0.0) • codesys control for iot2000 sl (< 4.6.0.0) • codesys control for linux sl (< 4.5.0.0) • codesys control for pfc100 sl (< 4.5.0.0) • codesys control for pfc200 sl (< 4.5.0.0) • codesys control for plcnext (< 4.6.0.0) • codesys control for raspberry pi sl (< 4.5.0.0) • codesys control for wago touch panels 600 (< 4.5.0.0) • codesys control rte sl (< 3.5.18.20) • codesys control rte sl \(for beckhoff cx\) (< 3.5.18.20) • codesys control runtime system toolkit (< 3.5.18.20) • codesys control win (< 3.5.18.20) • codesys development system (< 3.5.18.20) • codesys edge gateway (< 3.5.18.20) • codesys edge gateway (< 4.5.0.0) • codesys embedded target visu toolkit (< 3.5.18.20) • codesys gateway (< 3.5.18.20) • codesys hmi (< 3.5.18.20) • codesys remote target visu toolkit (< 3.5.18.20)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References