7.7
High
CVE-2022-4048 Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated…
Description
Inadequate Encryption Strength in CODESYS Development System V3 versions prior to V3.5.18.40 allows an unauthenticated local attacker to access and manipulate code of the encrypted boot application.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System V3 0.0 | 0.0.0.0 → < 3.5.18.40 | 3.5.18.40 |
References
- customers.codesys.com customers.codesys.com
Timeline
- Published
- Last modified
Other CVEs of CODESYS Development System V3
The 40 CVEs of CODESYS Development System V3 →
CVE-2023-5751
A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the…
7.8
High
CVE-2023-37559
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network…
6.5
Medium
CVE-2023-37558
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network…
6.5
Medium
CVE-2023-37557
After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted remote…
6.5
Medium