What’s Vulnerable › Vulnerabilities

CVE-2022-22510: CODESYS: Null Pointer Dereference in CODESYS PROFINET stack

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-02 · updated 2026-06-17
• Weakness: CWE-476

Description

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.

Affected products

• CODESYS Profinet: 4.2.0.0

References

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=
• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=

Get alerted when CVE-2022-22510 or the next vulnerability affects your stack