Vulnerabilities > CVE-2022-4048 - Unspecified vulnerability in Codesys Development System V3

047910
CVSS 7.7 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
local
low complexity
codesys

Summary

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

Vulnerable Configurations

Part Description Count
Application
Codesys
1