CVE-2022-22514CWE-822

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

High · published April 7, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If invalid memory is accessed, this results in a crash.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00893 · 59.1th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2022-04-07T18:21Z
EPSS history
Timeline
  • 07 APR 18:21Z
    Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
    cvelistv5