CVE-2022-30792

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

VendorProductVersions
CODESYSCODESYS Control RTE (SL)>= V3, < V3.5.18.20
CODESYSCODESYS Control RTE (for Beckhoff CX) SL>= V3, < V3.5.18.20
CODESYSCODESYS Control Win (SL)>= V3, < V3.5.18.20
CODESYSCODESYS Gateway>= V3, < V3.5.18.20
CODESYSCODESYS Edge Gateway for Windows>= V3, < V3.5.18.20
CODESYSCODESYS HMI (SL)>= V3, < V3.5.18.20
CODESYSCODESYS Development System V3>= V3, < V3.5.18.10
CODESYSCODESYS Control Runtime System Toolkit>= V3, < V3.5.18.20
CODESYSCODESYS Embedded Target Visu Toolkit>= V3, < V3.5.18.20
CODESYSCODESYS Remote Target Visu Toolkit>= V3, < V3.5.18.20
CODESYSCODESYS Control for BeagleBone SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for Beckhoff CX9020 SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for emPC-A/iMX6 SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for IOT2000 SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for Linux SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for PFC100 SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for PFC200 SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for PLCnext SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for Raspberry Pi SL>= V3, < V4.5.0.0
CODESYSCODESYS Control for WAGO Touch Panels 600 SL>= V3, < V4.5.0.0
CODESYSCODESYS Edge Gateway for Linux>= V3, < V4.5.0.0

References

Timeline

Published
Jul 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-307947.2Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductetails.php.CVE-2022-307957.2Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/editproductimage.php.CVE-2022-307979.8Online Ordering System 1.0 by oretnom23 is vulnerable to SQL Injection via admin/vieworders.php.CVE-2022-307987.2Online Ordering System v1.0 by oretnom23 is vulnerable to SQL Injection via admin/viewreport.php.CVE-2022-307997.2Online Ordering System v1.0 by oretnom23 has SQL injection via store/orderpage.php.CVE-2022-30807.5By sending specific queries to the resolver, an attacker can cause named to crash.CVE-2022-308046.5elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.CVE-2022-308089.8elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.CVE-2022-308099.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.CVE-2022-308109.8elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.CVE-2022-308139.8elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.CVE-2022-308149.8elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
CVE-2022-30792: High severity, CVSS 7.5 | Vulnix