Back to Database
Status published
High
CVE-2022-4046
CODESYS: Improper memory restrictions fro CODESYS Control
Vulnerability Description
In CODESYS Control in multiple versions a improper restriction of operations within the bounds of a memory buffer allow an remote attacker with user privileges to gain full access of the device.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-4046
Credits & Attribution
No credits recorded in the NVD database.
More from CODESYS
View All →CVE-2025-41739
CODESYS Control - Linux/QNX SysSocket flaw
Medium
5.9
CVE-2025-41738
CODESYS Control - Invalid type usage in visualization
High
7.5
CVE-2025-41700
CODESYS Development System - Deserialization of Untrusted Data
High
7.8
CVE-2025-41691
CODESYS Control DoS via Unauthenticated NULL Pointer Dereference
High
7.5
CVE-2025-41660
CODESYS Control Boot Application Replacement Enables Code Execution
High
8.8
Affected Vendor
CODESYS
View all reports →Affected Software
CODESYS Control for BeagleBone SL, CODESYS Control for emPC-A/iMX6 SL, CODESYS Control for IOT2000 SL, CODESYS Control for Linux SL, CODESYS Control for PFC100 SL, CODESYS Control for PFC200 SL, CODESYS Control for PLCnext SL, CODESYS Control for Raspberry Pi SL, CODESYS Control for WAGO Touch Panels 600 SL, CODESYS Control RTE (for Beckhoff CX) SL, CODESYS Control RTE (SL), CODESYS Control Runtime System Toolkit, CODESYS Control Win (SL), CODESYS HMI (SL)
Vulnerable Versions:
all
Timeline
Official Publish:
August 3rd, 2023
Last Modified:
May 29th, 2026
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H