CVE-2022-47391

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
CODESYS	CODESYS Control RTE (SL)	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Control RTE (for Beckhoff CX) SL	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Control Win (SL)	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Control Runtime System Toolkit	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Safety SIL2 Runtime Toolkit	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Safety SIL2 PSP	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Edge Gateway for Windows	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Gateway	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS HMI (SL)	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Development System V3	>= V0.0.0.0, < V3.5.19.0
CODESYS	CODESYS Control for BeagleBone SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for emPC-A/iMX6 SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for IOT2000 SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for Linux SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for PFC100 SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for PFC200 SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for PLCnext SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for Raspberry Pi SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Control for WAGO Touch Panels 600 SL	>= V0.0.0.0, < V4.8.0.0
CODESYS	CODESYS Edge Gateway for Linux	>= V0.0.0.0, < V4.8.0.0

References

Timeline

Published: May 15, 2023
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-473926.5An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multipl CVE-2022-473936.5An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multipl CVE-2022-473958.1Sewio’s Real-Time Location System (RTLS) Studio version 2.0.0 up to and including version 2.6.2 is vulnerable to cross-site request forgery CVE-2022-47406.1A vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttri CVE-2022-474069.8An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO CVE-2022-474076.5An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can cont CVE-2022-474089.1An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 t CVE-2022-474097.5An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 t CVE-2022-47416.5A vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/Conve CVE-2022-474107.5An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 t CVE-2022-474117.5An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 t CVE-2022-474125.4Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or "Type II") cross-