CVE-2022-22508

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CERTVDECNA
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 30%
VendorProductVersion
codesyscontrol_for_beaglebone_sl
𝑥
< 4.7.0.0
codesyscontrol_for_empc-a\/imx6_sl
𝑥
< 4.7.0.0
codesyscontrol_for_iot2000_sl
𝑥
< 4.7.0.0
codesyscontrol_for_linux_sl
𝑥
< 4.7.0.0
codesyscontrol_for_pfc100_sl
𝑥
< 4.7.0.0
codesyscontrol_for_pfc200_sl
𝑥
< 4.7.0.0
codesyscontrol_for_plcnext_sl
𝑥
< 4.7.0.0
codesyscontrol_for_raspberry_pi_sl
𝑥
< 4.7.0.0
codesyscontrol_for_wago_touch_panels_600_sl
𝑥
< 4.7.0.0
codesyscontrol_rte_\(for_beckhoff_cx\)_sl
𝑥
< 3.5.18.40
codesyscontrol_rte_\(sl\)
𝑥
< 3.5.18.40
codesyscontrol_runtime_system_toolkit
𝑥
< 3.5.18.40
codesyscontrol_win_\(sl\)
𝑥
< 3.5.18.40
codesyshmi_\(sl\)
𝑥
< 3.5.18.40
𝑥
= Vulnerable software versions