← Database

CVE-2022-22519

HIGH CVSS: 7.5 Published: 2022-04-07 Modified: 2026-06-17

Description

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

Affected Platforms

Codesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Empc-A\/Imx6 SlCodesys Control Rte Sl \(For Beckhoff Cx\)Codesys Control For Wago Touch Panels 600 SlCodesys Control Runtime System ToolkitCodesys Hmi SlCodesys Control For Beckhoff Cx9020Codesys Control For Pfc200 SlCodesys Control For Pfc100 Sl

Weakness Type

CWE-126, CWE-125

References