Control For Beckhoff Cx9020
Approved changes feed: RSS · Atom
cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Codesys (4a5dbd6f-1914-5b18-8641-403ab498c199) |
|---|---|
| Product | Control For Beckhoff Cx9020 (c8bd1c6e-fdad-56ea-a098-d29cd9cebe4e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22519 |
vulnerable | 2026-06-08 05:40:54.094462 |
Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the runtime system.
HIGH (7.5)
A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
Published: 2022-04-07T18:21:23.764Z
Updated: 2024-09-17T03:22:45.345Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22518 |
vulnerable | 2026-06-08 05:40:54.092934 |
A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.
MEDIUM (6.5)
A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
Published: 2022-04-07T18:21:21.950Z
Updated: 2024-09-17T02:11:34.421Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22517 |
vulnerable | 2026-06-08 05:40:54.091410 |
Communication Components in multiple CODESYS products vulnerable to communication channel disruption
HIGH (7.5)
An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.
Published: 2022-04-07T18:21:20.091Z
Updated: 2024-09-16T22:16:04.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22515 |
vulnerable | 2026-06-08 05:40:54.076994 |
A component of the CODESYS Control runtime system allows read and write access to configuration files
HIGH (8.1)
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
Published: 2022-04-07T18:21:16.280Z
Updated: 2024-09-16T17:59:22.215Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22514 |
vulnerable | 2026-06-08 05:40:54.075100 |
Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
HIGH (7.1)
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Published: 2022-04-07T18:21:14.309Z
Updated: 2024-09-17T03:03:50.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22513 |
vulnerable | 2026-06-08 05:40:54.062740 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.