Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-30792

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels

Description

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Control RTE (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control RTE (for Beckhoff CX) SL

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control Win (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Gateway

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Edge Gateway for Windows

  • V3 to < V3.5.18.20affected

CODESYS CODESYS HMI (SL)

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Development System V3

  • V3 to < V3.5.18.10affected

CODESYS CODESYS Control Runtime System Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Embedded Target Visu Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Remote Target Visu Toolkit

  • V3 to < V3.5.18.20affected

CODESYS CODESYS Control for BeagleBone SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Beckhoff CX9020 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for emPC-A/iMX6 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for IOT2000 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Linux SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PFC100 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PFC200 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for PLCnext SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for Raspberry Pi SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Control for WAGO Touch Panels 600 SL

  • V3 to < V4.5.0.0affected

CODESYS CODESYS Edge Gateway for Linux

  • V3 to < V4.5.0.0affected

References