What is CVE-2022-1965?

CVE-2022-1965 is a high-severity vulnerability in Codesys Plcwinnt, classified under Improper Handling of Exceptional Conditions. CVSS score: 8.1/10. Published 2022-06-24.

How severe is CVE-2022-1965?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in Codesys Plcwinnt

CVE-2022-1965

Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be delet…

EPSS: 0.010 (57.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Codesys Plcwinnt — versions V2
Codesys Runtime Toolkit — versions V2
Codesys Runtime_toolkit

Weakness classification (CWE)

CWE-755 — Improper Handling of Exceptional Conditions

References

info@cert.vde.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)

Frequently asked questions

What is CVE-2022-1965?: CVE-2022-1965 is a high-severity vulnerability in Codesys Plcwinnt, classified under Improper Handling of Exceptional Conditions. CVSS score: 8.1/10. Published 2022-06-24.
How severe is CVE-2022-1965?: High severity. CVSS v3 base score is 8.1 out of 10.