CVE-2022-4048: Codesys Development System v3

High severity, CVSS 7.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Affected products

• Codesys Development System v3: before 3.5.18.40 (fixed in 3.5.18.40)

Published 2023-05-15. Last modified 2026-06-17.