Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2022-4048

CODESYS V3 prone to Inadequate Encryption Stregth

Description

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Development System V3

Default version status: unaffected

  • V0.0.0.0 to < V3.5.18.40affected

References