VULNERABILITY INTELLIGENCE
CVE-2022-22515
CVSS score8.1 HIGH
EPSS probability1.29%
CISA KEVNot currently listed
Published2022-04-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Description
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected products.
Weakness classification
- info@cert.vde.com: CWE-668
Primary references
- info@cert.vde.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory