CVE-2022-30792CWE-400

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels

High · published July 11, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00894 · 59.1th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-07-11T10:40Z
EPSS history
Timeline
  • 11 JUL 10:40Z
    CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels
    cvelistv5