CVE-2022-22514

Name of the Vulnerable Software and Affected Versions CODESYS products (affected versions not specified)

Description An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request, leading to a null pointer dereference in the CmpSettings component. This can cause local overwriting of memory in the CmpTraceMgr, resulting in a crash if invalid memory is accessed. The attacker cannot gain the values read internally nor control the values to be written.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.