CVE:CVE-2022-22517
CNNVD:CNNVD-202204-2618
CODESYS是德国3S-Smart Software Solutions的一套控制器开发系统
CODESYS 产品存在安全漏洞，该漏洞源于未经身份验证的远程攻击者可以通过猜测有效的通道 ID 并注入数据包来破坏 CODESYS 产品之间的现有通信通道。这导致通信通道被关闭。
solution:Upgrade codesys control_for_beaglebone_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_beckhoff_cx9020 to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_empc-a/imx6_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_iot2000_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_linux_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_pfc100_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_pfc200_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_plcnext_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_raspberry_pi_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_for_wago_touch_panels_600_sl to a higher version than 4.5.0.0,and avoid the version (,4.5.0.0); Upgrade codesys control_rte_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_rte_sl_(for_beckhoff_cx) to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_runtime_system_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys control_win_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys development_system to a higher version than 3.5.18.0,and avoid the version [3.0,3.5.18.0); Upgrade codesys edge_gateway to a higher version than 3.5.18.0,4.5.0.0,and avoid the version (,3.5.18.0),(,4.5.0.0); Upgrade codesys embedded_target_visu_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys gateway to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys hmi_sl to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0); Upgrade codesys remote_target_visu_toolkit to a higher version than 3.5.18.0,and avoid the version (,3.5.18.0)