CVE-2022-22515 HIGH

CVE-2022-22515: A component of the CODESYS Control runtime system allows read and write access to configuration files

Vendor Codesys
Product CODESYS Control RTE (SL)
Weakness CWE-668
Published April 7, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

What the vulnerability does

01Description

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

Key dates

02Disclosure timeline

April 7, 2022 CVE published
September 16, 2024 Record updated