Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-30791

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections

Description

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Control RTE (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control RTE (for Beckhoff CX) SL

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control Win (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Gateway

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Edge Gateway for Windows

  • V3 to < V3.5.18.20affected

CODESYS CODESYS HMI (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Development System V3

  • V3 to < V3.5.18.10affected

CODESYS CODESYS Control Runtime System Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Embedded Target Visu Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Remote Target Visu Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control for BeagleBone SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Beckhoff CX9020 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for emPC-A/iMX6 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for IOT2000 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Linux SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PFC100 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PFC200 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PLCnext SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Raspberry Pi SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for WAGO Touch Panels 600 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Edge Gateway for Linux

  • V3 to < V4.5.0.0affected

References