CVE-2022-4224: Codesys Control For Beaglebone Sl

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In multiple products of CODESYS v3 in multiple versions a remote low privileged user could utilize this vulnerability to read and modify system files and OS resources or DoS the device.

Affected products

• Codesys Control For Beaglebone Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For Empc-a/imx6 Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For IOT2000 Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For Linux Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For PFC100 Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For PFC200 Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For Plcnext Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For Raspberry Pi Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control For Wago Touch Panels 600 Sl: from 3.0, before 4.8.0.0 (fixed in 4.8.0.0)
• Codesys Control Rte Sl: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys Control Rte Sl (for Beckhoff Cx): from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys Control Win Sl: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys Development System: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys HMI Sl: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys Runtime Toolkit: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)
• Codesys Safety SIL2: from 3.0, before 3.5.19.0 (fixed in 3.5.19.0)

Published 2023-03-23. Last modified 2026-06-17.