U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

Vulnerability Change Records for CVE-2022-22517

Change History

Initial Analysis 4/18/2022 9:19:10 AM

Action Type Old Value New Value
Added CPE Configuration 

								
							
							
								
							
						
								
							
								
OR
     *cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_beckhoff_cx9020:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_empc-a\/imx6_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:control_rte_sl_\(for_beckhoff_cx\):*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:control_win_sl:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:* versions from (including) 3.0 up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:* versions up to (excluding) 4.5.0.0
     *cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0
     *cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:* versions up to (excluding) 3.5.18.0

								
								
					

					

						Added
						CVSS V2
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
NIST (AV:N/AC:L/Au:N/C:N/I:N/A:P)

								
								
					

					

						Added
						CVSS V3.1
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

								
								
					

					

						Added
						CWE
						
							
							
								
							
								

								
							
							
								
							
						
								
							
								
NIST CWE-330

								
								
					

					

						Changed
						Reference Type
						
							
							
								
							
								
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17091&token=c450f8bbbd838c647d102f359356386c6ea5aeca&download= No Types Assigned

								
							
							
								
							
						
								
							
								
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17091&token=c450f8bbbd838c647d102f359356386c6ea5aeca&download= Vendor Advisory