CVE-2022-22516 HIGH

CVE-2022-22516: CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in restricted memory space.

Vendor Codesys
Product CODESYS Control RTE (SL)
Weakness CWE-732
Published April 7, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The SysDrv3S driver in the CODESYS Control runtime system on Microsoft Windows allows any system user to read and write within restricted memory space.

Key dates

02Disclosure timeline

April 7, 2022 CVE published
September 17, 2024 Record updated