CVE:CVE-2022-4224
CNNVD:CNNVD-202303-1858
3s-smart Software Solutions CODESYS是德国德国3S智能软件系统方案有限公司（3s-smart Software Solutions）公司的一套控制器开发系统
3s-smart Software Solutions CODESYS v3版本存在安全漏洞，该漏洞源于允许远程低权限用户读取和修改系统文件和操作系统资源或 DoS 设备。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_linux_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_pfc100_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_pfc200_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_plcnext_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_for_wago_touch_panels_600_sl to a higher version than 4.8.0.0,and avoid the version [3.0,4.8.0.0); Upgrade codesys control_rte_sl to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys control_rte_sl_(for_beckhoff_cx) to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys control_win_sl to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys development_system to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys hmi_sl to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys runtime_toolkit to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0); Upgrade codesys safety_sil2 to a higher version than 3.5.19.0,and avoid the version [3.0,3.5.19.0)