Vulnerabilities > CVE-2022-22515 - Exposure of Resource to Wrong Sphere vulnerability in Codesys products

047910
CVSS 8.1 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
codesys
CWE-668

Summary

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.

Vulnerable Configurations

Part Description Count
Application
Codesys
388

Common Weakness Enumeration (CWE)