Medium severity4.3NVD Advisory· Published May 15, 2023· Updated Jun 17, 2026
CVE-2022-22508
CVE-2022-22508
Description
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
Affected products
17- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: <4.7.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: <4.7.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: <4.7.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: <4.7.0.0
cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*range: <4.7.0.0
- (no CPE)range: V0.0.0.0
cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*range: <4.7.0.0
- (no CPE)range: V0.0.0.0
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*Range: <4.7.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: <4.7.0.0
- cpe:2.3:a:codesys:control_rte_\(for_beckhoff_cx\)_sl:*:*:*:*:*:*:*:*Range: <3.5.18.40
- cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.40
Patches
Vulnerability mechanics
References
1- customers.codesys.com/index.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.