Codesys Control For Beckhoff CX9020 vulnerabilities

6 CVEs affecting Codesys Control For Beckhoff CX9020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22519, published 2022-04-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22519, published 2022-04-07. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.
CVE-2022-22517, published 2022-04-07. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication…
CVE-2022-22515, published 2022-04-07. High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days. A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected…
CVE-2022-22513, published 2022-04-07. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
CVE-2022-22514, published 2022-04-07. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the…
CVE-2022-22518, published 2022-04-07. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.