CVE-2022-30792 (GCVE-0-2022-30792)
Vulnerability from cvelistv5 – Published: 2022-07-11 10:40 – Updated: 2024-09-16 23:05
VLAI
EPSS
VEX
Title
CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
Summary
In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.
Severity
7.5 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://customers.codesys.com/index.php?eID=dumpF… | x_refsource_CONFIRM |
Impacted products
21 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| CODESYS | CODESYS Control RTE (SL) |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Control RTE (for Beckhoff CX) SL |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Control Win (SL) |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Gateway |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Edge Gateway for Windows |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS HMI (SL) |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Development System V3 |
Affected:
V3 , < V3.5.18.10
(custom)
|
guessed | |
| CODESYS | CODESYS Control Runtime System Toolkit |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Embedded Target Visu Toolkit |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Remote Target Visu Toolkit |
Affected:
V3 , < V3.5.18.20
(custom)
|
guessed | |
| CODESYS | CODESYS Control for BeagleBone SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for Beckhoff CX9020 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for emPC-A/iMX6 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for IOT2000 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for Linux SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for PFC100 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for PFC200 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for PLCnext SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for Raspberry Pi SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Control for WAGO Touch Panels 600 SL |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed | |
| CODESYS | CODESYS Edge Gateway for Linux |
Affected:
V3 , < V4.5.0.0
(custom)
|
guessed |
Date Public
2022-07-08 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T07:03:38.599Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download="
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "CODESYS Control RTE (SL)",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control RTE (for Beckhoff CX) SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control Win (SL)",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Gateway",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Edge Gateway for Windows",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS HMI (SL)",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Development System V3",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.10",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control Runtime System Toolkit",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Embedded Target Visu Toolkit",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Remote Target Visu Toolkit",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V3.5.18.20",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for BeagleBone SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for Beckhoff CX9020 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for emPC-A/iMX6 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for IOT2000 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for Linux SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for PFC100 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for PFC200 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for PLCnext SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for Raspberry Pi SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Control for WAGO Touch Panels 600 SL",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
},
{
"product": "CODESYS Edge Gateway for Linux",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V4.5.0.0",
"status": "affected",
"version": "V3",
"versionType": "custom"
}
]
}
],
"datePublic": "2022-07-08T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "CWE-400 Uncontrolled Resource Consumption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-07-11T10:40:43.000Z",
"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"shortName": "CERTVDE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download="
}
],
"source": {
"defect": [
"CERT@VDE#",
"64130"
],
"discovery": "UNKNOWN"
},
"title": "CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels",
"x_generator": {
"engine": "Vulnogram 0.0.9"
},
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "info@cert.vde.com",
"DATE_PUBLIC": "2022-07-08T06:00:00.000Z",
"ID": "CVE-2022-30792",
"STATE": "PUBLIC",
"TITLE": "CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "CODESYS Control RTE (SL)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Control RTE (for Beckhoff CX) SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Control Win (SL)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Gateway",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Edge Gateway for Windows",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS HMI (SL)",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Development System V3",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.10"
}
]
}
},
{
"product_name": "CODESYS Control Runtime System Toolkit",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Embedded Target Visu Toolkit",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Remote Target Visu Toolkit",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V3.5.18.20"
}
]
}
},
{
"product_name": "CODESYS Control for BeagleBone SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for Beckhoff CX9020 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for emPC-A/iMX6 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for IOT2000 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for Linux SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for PFC100 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for PFC200 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for PLCnext SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for Raspberry Pi SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Control for WAGO Touch Panels 600 SL",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
},
{
"product_name": "CODESYS Edge Gateway for Linux",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "V3",
"version_value": "V4.5.0.0"
}
]
}
}
]
},
"vendor_name": "CODESYS"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected."
}
]
},
"generator": {
"engine": "Vulnogram 0.0.9"
},
"impact": {
"cvss": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-400 Uncontrolled Resource Consumption"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download=",
"refsource": "CONFIRM",
"url": "https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download="
}
]
},
"source": {
"defect": [
"CERT@VDE#",
"64130"
],
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c",
"assignerShortName": "CERTVDE",
"cveId": "CVE-2022-30792",
"datePublished": "2022-07-11T10:40:43.935Z",
"dateReserved": "2022-05-16T00:00:00.000Z",
"dateUpdated": "2024-09-16T23:05:31.037Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2022-30792",
"date": "2026-09-17",
"epss": "0.00868",
"percentile": "0.57042"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2022-30792\",\"sourceIdentifier\":\"info@cert.vde.com\",\"published\":\"2022-07-11T11:15:08.240\",\"lastModified\":\"2026-06-17T04:44:18.923\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.\"},{\"lang\":\"es\",\"value\":\"En CmpChannelServer de CODESYS versi\u00f3n V3 en m\u00faltiples versiones un consumo no controlado de recursos permite a un atacante no autorizado bloquear nuevas conexiones de canales de comunicaci\u00f3n. Las conexiones existentes no est\u00e1n afectadas\"}],\"affected\":[{\"source\":\"info@cert.vde.com\",\"affectedData\":[{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control RTE (SL)\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control RTE (for Beckhoff CX) SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control Win (SL)\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Gateway\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Edge Gateway for Windows\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS HMI (SL)\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Development System V3\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.10\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control Runtime System Toolkit\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Embedded Target Visu Toolkit\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Remote Target Visu Toolkit\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V3.5.18.20\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for BeagleBone SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Beckhoff CX9020 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for emPC-A/iMX6 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for IOT2000 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Linux SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PFC100 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PFC200 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for PLCnext SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for Raspberry Pi SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Control for WAGO Touch Panels 600 SL\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"CODESYS\",\"product\":\"CODESYS Edge Gateway for Linux\",\"versions\":[{\"version\":\"V3\",\"lessThan\":\"V4.5.0.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"info@cert.vde.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_beaglebone:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"B5D6E827-7AD1-4248-82E6-C879771A2FBA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_empc-a\\\\/imx6:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"E07464D3-D8E5-45CC-8703-B445A866F015\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6.0.0\",\"matchCriteriaId\":\"AD1474A7-A282-4929-A9E4-721322DCAE15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"AB585AB5-D0AC-46DC-9723-A0FEFBFB015C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"4F6E2A1D-0187-4C71-A87D-48B3EC3D99DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"A78E493B-6D9E-4196-830C-24BCF25D3D44\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_plcnext:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.6.0.0\",\"matchCriteriaId\":\"BD0BCA34-FE68-4933-B189-746D2DA3E062\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"9D5DE9D1-C334-452C-A64B-D74A48017B6D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_for_wago_touch_panels_600:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"966AEA54-4939-4C84-8D8B-7C70D361555B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_rte_sl:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"A33E4442-F316-439F-83BD-047A34EF6E14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_rte_sl_\\\\(for_beckhoff_cx\\\\):*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"8AC245C1-F19D-417A-801E-D08B0ED81651\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"F1A0B9C6-534C-4D2C-BC62-620786CE748F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"22F16730-93D3-41D4-B5D0-F507BC2D5A03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"05792C1C-C4BB-4084-96A3-69544076F944\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"6C919501-6AFE-4D4C-84EF-C6AF30EBB769\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*\",\"versionEndExcluding\":\"4.5.0.0\",\"matchCriteriaId\":\"E36291AE-21CB-4ECB-8816-D50712C70E30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"26B19D43-1A55-45E5-9C0A-00E9487B4282\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"73C1F863-AAC0-446A-98E1-436916DA66B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"C26E9A35-AEB3-4856-8410-989D422A6D95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.5.18.20\",\"matchCriteriaId\":\"26CA4951-7DD0-4477-8C36-EC07191CAC8F\"}]}]}],\"references\":[{\"url\":\"https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download=\",\"source\":\"info@cert.vde.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://customers.codesys.com/index.php?eID=dumpFile\u0026t=f\u0026f=17128\u0026token=bee4d8a57f19be289d623ec90135493b5f9179e3\u0026download=\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"redhat_vex": {
"current_release_date": "2026-03-27T12:25:10+00:00",
"cve": "CVE-2022-30792",
"id": "CVE-2022-30792",
"initial_release_date": "2022-07-08T00:00:00+00:00",
"product_status:known_not_affected": "1",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-30792.json",
"version": "3"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…