High · 7.5 CVE-2022-22510 EUVD-2022-27656GHSA-24fj-279j-cvw2

CODESYS: Null Pointer Dereference in CODESYS PROFINET stack

Published Feb 2, 2022 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

Codesys Profinet in version V4.2.0.0 is prone to null pointer dereference that allows a denial of service (DoS) attack of an unauthenticated user via SNMP.

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17020&token=9acf91a2b5e1719ff71a019e86c3e8e411bfd252&download=