CVE-2022-22518

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2022
Source publication: Apr 7, 2022
Source updated: Sep 17, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy.

A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

CODESYS Control for BeagleBone SL

Vendor: CODESYS
Product: CODESYS Control for BeagleBone SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for BeagleBone SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for Beckhoff CX9020 SL

Vendor: CODESYS
Product: CODESYS Control for Beckhoff CX9020 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for Beckhoff CX9020 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for emPC-A/iMX6 SL

Vendor: CODESYS
Product: CODESYS Control for emPC-A/iMX6 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for emPC-A/iMX6 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for IOT2000 SL

Vendor: CODESYS
Product: CODESYS Control for IOT2000 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for IOT2000 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for Linux SL

Vendor: CODESYS
Product: CODESYS Control for Linux SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for Linux SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for PFC100 SL

Vendor: CODESYS
Product: CODESYS Control for PFC100 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for PFC100 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for PFC200 SL

Vendor: CODESYS
Product: CODESYS Control for PFC200 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for PFC200 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for Raspberry Pi SL

Vendor: CODESYS
Product: CODESYS Control for Raspberry Pi SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for Raspberry Pi SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control for WAGO Touch Panels 600 SL

Vendor: CODESYS
Product: CODESYS Control for WAGO Touch Panels 600 SL
Platforms: Unknown
Default status: Unknown

CODESYS Control for WAGO Touch Panels 600 SL · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V4.5.0.0	`affected`	custom	V4.5.0.0	Unavailable	None listed

CODESYS Control Runtime System Toolkit

Vendor: CODESYS
Product: CODESYS Control Runtime System Toolkit
Platforms: Unknown
Default status: Unknown

CODESYS Control Runtime System Toolkit · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
V3.5.18.0	`affected`	custom	V3.5.18.0	Unavailable	None listed