CVE:CVE-2022-22518
CNNVD:CNNVD-202204-2617
Schneider Electric CmpUserMgr是法国施耐德电气（Schneider Electric）公司的一个库。提供对用户管理的访问。
Schneider Electric CmpUserMgr 组件存在安全漏洞，该漏洞源于CmpUserMgr 组件中的错误可能导致仅部分应用安全策略。这可能导致对应用的安全策略的组件部分启用匿名访问。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_beckhoff_cx9020 to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_linux_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_pfc100_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_pfc200_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_for_wago_touch_panels_600_sl to a higher version than 4.5.0.0,and avoid the version [4.4.0.0,4.5.0.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.18.0,and avoid the version [3.5.17.0,3.5.18.0)