Vulnerability · Published Apr 7, 2022 · Assigned by CERTVDE
CVE-2022-22514Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
High 7.1
In plain English
A high-severity security flaw in CODESYS Control for BeagleBone SL from CODESYS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)1.0%top 35.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.
Affected products (as reported)
Weakness: CWE-822 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H