High severity7.1NVD Advisory· Published Apr 7, 2022· Updated Jun 17, 2026
CVE-2022-22514
CVE-2022-22514
Description
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Affected products
23- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- (no CPE)range: V4.5.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*Range: <3.5.18.0
- cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.0
- cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*Range: >=3.0,<3.5.18.0
cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*range: <4.5.0.0
- cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*range: <3.5.18.0
- cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.0
- cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.0
Patches
Vulnerability mechanics
References
1- customers.codesys.com/index.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.