CVE-2022-22508— CODESYS V3: Improper Input Validation
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-22508
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CODESYS V3: Improper Input Validation
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
3s-smart Software Solutions CODESYS 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
3s-smart Software Solutions CODESYS是德国德国3S智能软件系统方案有限公司（3s-smart Software Solutions）公司的一套控制器开发系统 3s-smart Software Solutions CODESYS 存在输入验证错误漏洞，该漏洞源于不当输入验证漏洞，经过身份验证的远程攻击者利用该漏洞可以阻止特定类型的连续登录。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| CODESYS V3 | CODESYS Control RTE (SL) | V0.0.0.0 ~ V3.5.18.40 | - | |
| CODESYS V3 | CODESYS Control RTE (for Beckhoff CX) SL | V0.0.0.0 ~ V3.5.18.40 | - | |
| CODESYS V3 | CODESYS Control Win (SL) | V0.0.0.0 ~ V3.5.18.40 | - | |
| CODESYS V3 | CODESYS HMI (SL) | V0.0.0.0 ~ V3.5.18.40 | - | |
| CODESYS V3 | CODESYS Control Runtime System Toolkit | V0.0.0.0 ~ V3.5.18.40 | - | |
| CODESYS V3 | CODESYS Control for BeagleBone SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for emPC-A/iMX6 SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for IOT2000 SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for Linux SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for PFC100 SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for PFC200 SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for PLCnext SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for Raspberry Pi SL | V0.0.0.0 ~ V4.7.0.0 | - | |
| CODESYS V3 | CODESYS Control for WAGO Touch Panels 600 SL | V0.0.0.0 ~ V4.7.0.0 | - |
II. Public POCs for CVE-2022-22508
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22508
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: CODESYS Control RTE (SL)
- CVE-2026-3509
CODESYS Control Audit Log Format String DoS - CVE-2025-41660
CODESYS Control Boot Application Replacement Enables Code Ex - CVE-2025-41738
CODESYS Control - Invalid type usage in visualization - CVE-2022-47393
CODESYS: Multiple products prone to improperly restricted me - CVE-2022-47392
CODESYS: Multiple products prone to Improper Input Validatio
Same weakness: CWE-20
V. Comments for CVE-2022-22508
No comments yet