CVE-2022-22518: Codesys Control For Beaglebone Sl

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.

Affected products

• Codesys Control For Beaglebone Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For Beckhoff CX9020: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For Empc-a/imx6 Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For IOT2000 Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For Linux Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For PFC100 Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For PFC200 Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For Raspberry Pi Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control For Wago Touch Panels 600 Sl: from 4.4.0.0, before 4.5.0.0 (fixed in 4.5.0.0)
• Codesys Control Runtime System Toolkit: from 3.5.17.0, before 3.5.18.0 (fixed in 3.5.18.0)

Published 2022-04-07. Last modified 2026-06-17.