CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NCVE-2022-22518
Medium (6.5) in codesys. EPSS 0.6% chance of exploitation in the next 30 days.
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-11-01)
- CWE
- CWE-276
- Published
- Modified
- Record from
- the NVD, synced
Affected
- codesys:control_for_beaglebone_sl
- codesys:control_for_beckhoff_cx9020
- codesys:control_for_empc-a\/imx6_sl
- codesys:control_for_iot2000_sl
- codesys:control_for_linux_sl
- codesys:control_for_pfc100_sl
- codesys:control_for_pfc200_sl
- codesys:control_for_raspberry_pi_sl
- codesys:control_for_wago_touch_panels_600_sl
- codesys:control_runtime_system_toolkit