In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.
References
Configurations
Configuration 1 (hide)
|
History
17 Jul 2025, 13:10
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:codesys:safety_sil2_runtime_toolkit:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:safety_sil2_psp:*:*:*:*:*:*:*:* cpe:2.3:a:codesys:development_system_v3:*:*:*:*:*:*:*:* |
|
| First Time |
Codesys safety Sil2 Psp
Codesys safety Sil2 Runtime Toolkit Codesys development System V3 |
Information
Published : 2023-05-15 10:15
Updated : 2025-07-17 13:10
NVD link : CVE-2022-47391
Mitre link : CVE-2022-47391
CVE.ORG link : CVE-2022-47391
JSON object : View
Products Affected
codesys
- control_for_raspberry_pi_sl
- control_rte_\(sl\)
- control_rte_\(for_beckhoff_cx\)_sl
- control_for_pfc200_sl
- control_for_iot2000_sl
- control_for_pfc100_sl
- control_for_wago_touch_panels_600_sl
- development_system_v3
- safety_sil2_psp
- hmi_\(sl\)
- control_win_\(sl\)
- control_runtime_system_toolkit
- control_for_beaglebone_sl
- control_for_linux_sl
- control_for_empc-a\/imx6_sl
- control_for_plcnext_sl
- safety_sil2_runtime_toolkit
CWE
CWE-20
Improper Input Validation