CVEvulnerability
CVE-2022-30792
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
Affected configurations
• codesys control for beaglebone (< 4.5.0.0)
• codesys control for empc-a\/imx6 (< 4.5.0.0)
• codesys control for iot2000 sl (< 4.6.0.0)
• codesys control for linux sl (< 4.5.0.0)
• codesys control for pfc100 sl (< 4.5.0.0)
• codesys control for pfc200 sl (< 4.5.0.0)
• codesys control for plcnext (< 4.6.0.0)
• codesys control for raspberry pi sl (< 4.5.0.0)
• codesys control for wago touch panels 600 (< 4.5.0.0)
• codesys control rte sl (< 3.5.18.20)
• codesys control rte sl \(for beckhoff cx\) (< 3.5.18.20)
• codesys control runtime system toolkit (< 3.5.18.20)
• codesys control win (< 3.5.18.20)
• codesys development system (< 3.5.18.20)
• codesys edge gateway (< 3.5.18.20)
• codesys edge gateway (< 4.5.0.0)
• codesys embedded target visu toolkit (< 3.5.18.20)
• codesys gateway (< 3.5.18.20)
• codesys hmi (< 3.5.18.20)
• codesys remote target visu toolkit (< 3.5.18.20)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness