CVSS 3.1
8.1 highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NCVE-2022-22515
High (8.1) in codesys. EPSS 1.3% chance of exploitation in the next 30 days.
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-668
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone_sl
- codesys:control_for_beckhoff_cx9020
- codesys:control_for_empc-a\/imx6_sl
- codesys:control_for_iot2000_sl
- codesys:control_for_linux_sl
- codesys:control_for_pfc100_sl
- codesys:control_for_pfc200_sl
- codesys:control_for_plcnext_sl
- codesys:control_for_raspberry_pi_sl
- codesys:control_for_wago_touch_panels_600_sl
- codesys:control_rte_sl
- codesys:control_rte_sl_\(for_beckhoff_cx\)
- codesys:control_runtime_system_toolkit
- codesys:control_win_sl
- codesys:development_system
- codesys:embedded_target_visu_toolkit
- codesys:hmi_sl
- codesys:remote_target_visu_toolkit