CVE-2022-22518: falha de média gravidade em CODESYS Control for BeagleBone SL
A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar CODESYS Control for BeagleBone SL+ Monitorar CODESYS Control for emPC-A/iMX6 SL
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.6%
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
CODESYS · CODESYS Control for BeagleBone SLCODESYS · CODESYS Control for Beckhoff CX9020 SLCODESYS · CODESYS Control for emPC-A/iMX6 SLCODESYS · CODESYS Control for IOT2000 SLCODESYS · CODESYS Control for Linux SLCODESYS · CODESYS Control for PFC100 SLCODESYS · CODESYS Control for PFC200 SLCODESYS · CODESYS Control for Raspberry Pi SLCODESYS · CODESYS Control for WAGO Touch Panels 600 SLCODESYS · CODESYS Control Runtime System ToolkitCVEs relacionadas — CODESYS Control for BeagleBone SL
No mesmo produto, das mais perigosas para as menos.
CVE-2022-47379HIGHCODESYS: Multiple products prone to out-of-bounds writeEPSS 2.0%CVE-2022-47391HIGHCODESYS: Multiple products prone to Improper Input ValidationEPSS 1.9%CVE-2022-22519HIGHSpecial HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.EPSS 1.7%CVE-2022-22517HIGHCommunication Components in multiple CODESYS products vulnerable to communication channel disruptionEPSS 1.5%CVE-2022-47386HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%CVE-2022-47385HIGHCODESYS: Multiple products prone to stack based out-of-bounds writeEPSS 1.4%