CVE:CVE-2022-22514
CNNVD:CNNVD-202204-2621
CODESYS是德国3S-Smart Software Solutions的一套控制器开发系统
CODESYS 产品存在缓冲区错误漏洞，该漏洞源于经过身份验证的远程攻击者可以访问请求中包含的取消引用指针。这会导致受影响的 CODESYS 产品的 CmpSettings 组件中的空指针取消引用并导致崩溃。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_beckhoff_cx9020 to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_linux_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_pfc100_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_pfc200_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_plcnext_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_wago_touch_panels_600_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_rte_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_rte_sl_(for_beckhoff_cx) to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_win_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys development_system to a higher version than 3.5.18.0,and avoid the version [3.0,3.5.18.0); Upgrade codesys edge_gateway to a higher version than 3.5.18.0,4.5.0.0,and avoid the version (,3.5.18.0),(,4.5.0.0); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys gateway to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys hmi_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0)