CVE-2022-30791CWE-400

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections

High · published July 11, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00894 · 59.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-07-11T10:40Z
EPSS history
Timeline
  • 11 JUL 10:40Z
    CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections
    cvelistv5