CVE-2022-22517

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

7.5 High

CVE-2022-22517 is a high vulnerability (CVSS 7.5) in Codesys Control For Beaglebone Sl, published April 7, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.52%Up 0.5 points since Apr 9, 2022

What each source reports

CVE List Score used 7.5

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

Record: CVE-2022-22517
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-334
Updated: 2026-11-02

EUVDEUVD-2022-27663 7.5

Record: EUVD-2022-27663
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-03

GitHub AdvisoriesGHSA-95jh-v98h-7gww 7.5

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS...

Record: GHSA-95jh-v98h-7gww
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-330, CWE-334
Updated: 2026-11-02

NVD 7.5

Record: CVE-2022-22517
CVSS 3.1: 7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-334, CWE-330
Updated: 2026-11-02

Affected products

Show 19 moreShow less

History

History
When	Changed	Sources
2026-11-03	aliases, published	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD