Medium severity6.5NVD Advisory· Published Apr 7, 2022· Updated Jun 17, 2026
CVE-2022-22518
CVE-2022-22518
Description
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
Affected products
12- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*range: >=4.4.0.0,<4.5.0.0
- (no CPE)range: V4.5.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: >=4.4.0.0,<4.5.0.0
- cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*Range: >=3.5.17.0,<3.5.18.0
Patches
Vulnerability mechanics
References
1- customers.codesys.com/index.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.