What’s Vulnerable › Vulnerabilities

CVE-2022-4046: CODESYS: Improper memory restrictions fro CODESYS Control

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-03 · updated 2026-06-17
• Weakness: CWE-119

Description

In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.

Affected products

• CODESYS Control for BeagleBone SL: all versions
• CODESYS Control For Empc-A/Imx6 Sl: all versions
• CODESYS Control for IOT2000 SL: all versions
• CODESYS Control for Linux SL: all versions
• CODESYS Control for PFC100 SL: all versions
• CODESYS Control for PFC200 SL: all versions
• CODESYS Control for PLCnext SL: all versions
• CODESYS Control for Raspberry Pi SL: all versions
• CODESYS Control for WAGO Touch Panels 600 SL: all versions
• CODESYS Control RTE (SL): all versions
• CODESYS Control Rte Sl (For Beckhoff Cx): all versions
• CODESYS Control Runtime System Toolkit: all versions
• CODESYS Control Win (SL): all versions
• CODESYS HMI (SL): all versions

References

• https://cert.vde.com/en/advisories/VDE-2023-025/
• https://cert.vde.com/en/advisories/VDE-2023-025/

Get alerted when CVE-2022-4046 or the next vulnerability affects your stack