High severity7.5NVD Advisory· Published Apr 7, 2022· Updated Jun 17, 2026
CVE-2022-22519
CVE-2022-22519
Description
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
Affected products
20- cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*range: <4.5.0.0
- (no CPE)range: V4.5.0.0
- cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*Range: <4.5.0.0
- cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:*Range: <3.5.18.0
cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*range: <3.5.18.0
- (no CPE)
- cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.0
- cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*Range: <3.5.18.0
Patches
Vulnerability mechanics
References
1- customers.codesys.com/index.phpnvdVendor Advisory
News mentions
0No linked articles in our index yet.