CVE-2022-4048
CODESYS V3 prone to Inadequate Encryption Stregth
- State
- Published
- Severity
- 7.7 High
- Published
- May 15, 2023
- Updated
- Jan 23, 2025
- Reserved
- Nov 17, 2022
Description
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.7 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N | CERTVDE |
Weaknesses
- CWE-326 Inadequate Encryption Strength
Affected Products
| Product | Versions |
|---|---|
CODESYS Development System V3CODESYS |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.