CVE-2022-22508: Codesys Control For Beaglebone Sl

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in multiple CODESYS V3 products allows an authenticated remote attacker to block consecutive logins of a specific type.

Affected products

• Codesys Control For Beaglebone Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For Empc-a/imx6 Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For IOT2000 Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For Linux Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For PFC100 Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For PFC200 Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For Plcnext Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For Raspberry Pi Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control For Wago Touch Panels 600 Sl: before 4.7.0.0 (fixed in 4.7.0.0)
• Codesys Control Rte (for Beckhoff Cx) Sl: before 3.5.18.40 (fixed in 3.5.18.40)
• Codesys Control Rte (sl): before 3.5.18.40 (fixed in 3.5.18.40)
• Codesys Control Runtime System Toolkit: before 3.5.18.40 (fixed in 3.5.18.40)
• Codesys Control Win (sl): before 3.5.18.40 (fixed in 3.5.18.40)
• Codesys HMI (sl): before 3.5.18.40 (fixed in 3.5.18.40)

Published 2023-05-15. Last modified 2026-06-17.