← Database

CVE-2022-47392

MEDIUM CVSS: 6.5 Published: 2023-05-15 Modified: 2026-06-17

Description

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition.

Affected Platforms

Codesys Control Rte \(For Beckhoff Cx\) SlCodesys Control For Raspberry Pi SlCodesys Control For Plcnext SlCodesys Control For Empc-A\/Imx6 SlCodesys Control For Wago Touch Panels 600 SlCodesys Hmi \(Sl\)Codesys Development System V3Codesys Safety Sil2 PspCodesys Control Runtime System ToolkitCodesys Control For Pfc200 Sl

Weakness Type

CWE-20

References