cbcvebase.
CVE-2022-30792
published 2022-07-11

CVE-2022-30792: In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel…

PriorityP338high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.83%
53.3th percentile
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

Affected

40 ranges· showing 25
VendorProductVersion rangeFixed in
codesyscodesys_control_for_beaglebone_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_beckhoff_cx9020_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_empc-a_imx6_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_iot2000_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_linux_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_pfc100_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_pfc200_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_plcnext_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_raspberry_pi_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_for_wago_touch_panels_600_sl>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_control_rte>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_control_rte_sl>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_control_runtime_system_toolkit>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_control_win>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_development_system_v3>= V3 < V3.5.18.10V3.5.18.10
codesyscodesys_edge_gateway_for_linux>= V3 < V4.5.0.0V4.5.0.0
codesyscodesys_edge_gateway_for_windows>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_embedded_target_visu_toolkit>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_gateway>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_hmi>= V3 < V3.5.18.20V3.5.18.20
codesyscodesys_remote_target_visu_toolkit>= V3 < V3.5.18.20V3.5.18.20
codesyscontrol_for_beaglebone< 4.5.0.04.5.0.0
codesyscontrol_for_empc-a_imx6< 4.5.0.04.5.0.0
codesyscontrol_for_iot2000_sl< 4.6.0.04.6.0.0
codesyscontrol_for_linux_sl< 4.5.0.04.5.0.0

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.