VYPR
← All advisories
High severity8.1NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-1965

CVE-2022-1965

Description

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.

Affected products

5
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Runtime Toolkit2 versions
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/V3llm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.