CVE-2022-30791
CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
- State
- Published
- Severity
- 7.5 High
- Published
- Jul 11, 2022
- Updated
- Sep 16, 2024
- Reserved
- May 16, 2022
Description
In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | CERTVDE |
Weaknesses
- CWE-400 Uncontrolled Resource Consumption
Affected Products
| Product | Versions |
|---|---|
CODESYS Control RTE (SL)CODESYS |
|
CODESYS Control RTE (for Beckhoff CX) SLCODESYS |
|
CODESYS Control Win (SL)CODESYS |
|
CODESYS GatewayCODESYS |
|
CODESYS Edge Gateway for WindowsCODESYS |
|
CODESYS HMI (SL)CODESYS |
|
CODESYS Development System V3CODESYS |
|
CODESYS Control Runtime System ToolkitCODESYS |
|
CODESYS Embedded Target Visu ToolkitCODESYS |
|
CODESYS Remote Target Visu ToolkitCODESYS |
|
CODESYS Control for BeagleBone SLCODESYS |
|
CODESYS Control for Beckhoff CX9020 SLCODESYS |
|
CODESYS Control for emPC-A/iMX6 SLCODESYS |
|
CODESYS Control for IOT2000 SLCODESYS |
|
CODESYS Control for Linux SLCODESYS |
|
CODESYS Control for PFC100 SLCODESYS |
|
CODESYS Control for PFC200 SLCODESYS |
|
CODESYS Control for PLCnext SLCODESYS |
|
CODESYS Control for Raspberry Pi SLCODESYS |
|
CODESYS Control for WAGO Touch Panels 600 SLCODESYS |
|
CODESYS Edge Gateway for LinuxCODESYS |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.