High severity7.7NVD Advisory· Published May 15, 2023· Updated Jun 17, 2026

CVE-2022-4048

Description

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Affected products

Codesys/Development System V3
cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:*
Range: <3.5.18.40
Codesys/Development Systemllm-fuzzy2 versions
<V3.5.18.40+ 1 more
- (no CPE)range: <V3.5.18.40
- (no CPE)range: V0.0.0.0

Patches

Vulnerability mechanics

References

customers.codesys.com/index.phpnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000