Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-1965

CODESYS runtime system prone to file deletion due to improper error handling

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS Runtime Toolkit

  • V2 to < V2.4.7.57affected

CODESYS PLCWinNT

  • V2 to < V2.4.7.57affected

References