CVE-2022-4048CWE-326

CODESYS V3 prone to Inadequate Encryption Stregth

High · published May 15, 2023

CVSS v3.1
7.7
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00083 · 0.2th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2023-05-15T09:23Z
EPSS history
Timeline
  • 15 MAY 09:23Z
    CODESYS V3 prone to Inadequate Encryption Stregth
    cvelistv5