CVE-2022-4224
published 2023-03-23CVE-2022-4224: In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS…
PriorityP351high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.88%
55.4th percentile
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| codesys | control_for_beaglebone_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_beaglebone_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_empc-a_imx6_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_empc-a_imx6_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_iot2000_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_iot2000_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_linux_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_linux_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc100_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc100_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc200_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc200_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_plcnext_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_plcnext_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_raspberry_pi_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_raspberry_pi_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_wago_touch_panels_600_sl | >= 3.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_wago_touch_panels_600_sl | >= 3.0.0.0 < 4.8.0.0 | 4.8.0.0 |
| codesys | control_rte | >= 3.0.0.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | control_rte_sl | >= 3.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | control_rte_sl | >= 3.0.0.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | control_win | >= 3.0.0.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | control_win_sl | >= 3.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | development_system | >= 3.0 < 3.5.19.0 | 3.5.19.0 |
| codesys | development_system_v3 | >= 3.0.0.0 < 3.5.19.0 | 3.5.19.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p8q2-j5x8-g597: In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files
ghsa_unreviewed·2023-03-23
CVE-2022-4224 [HIGH] CWE-1188 GHSA-p8q2-j5x8-g597: In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files
In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.
CISA ICS
CODESYS in Festo Automation Suite
cisa_ics·2026-03-17
CODESYS in Festo Automation Suite
ICS Advisory
##
CODESYS in Festo Automation Suite
Release DateMarch 17, 2026
Alert CodeICSA-26-076-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
3. TECHNICAL DETAILS
The following versions of CODESYS in Festo Automation Suite are affected:
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.5.16.10) vers:all/*
- FESTO Software Festo Automation Suite (2.8.0.137) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation
No detection rules found.
No public exploits indexed.
2023-03-23
Published