CVE-2022-22513— Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
Quick assessment
Affected
CODESYS CODESYS Control RTE (SL)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
CODESYS是德国3S-Smart Software Solutions的一套控制器开发系统 CODESYS 存在代码问题漏洞，该漏洞源于经过身份验证的远程攻击者可以在受影响的 CODESYS 产品的 CmpSettings 组件中导致空指针取消引用，从而导致崩溃。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-22513
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Null Pointer Dereference in multiple CODESYS products can lead to a DoS.
Source: CVE Program / CVE List V5
Vulnerability Description
An authenticated remote attacker can cause a null pointer dereference in the CmpSettings component of the affected CODESYS products which leads to a crash.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Vulnerability Title
CODESYS 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
CODESYS是德国3S-Smart Software Solutions的一套控制器开发系统 CODESYS 存在代码问题漏洞，该漏洞源于经过身份验证的远程攻击者可以在受影响的 CODESYS 产品的 CmpSettings 组件中导致空指针取消引用，从而导致崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2022-22513
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-22513
请登录查看更多情报信息。
Other References for CVE-2022-22513 (1)
Same Patch Batch · CODESYS · 2022-04-07 · 7 CVEs total
| CVE-2022-22515 | 8.1 HIGH | A component of the CODESYS Control runtime system allows read and write access to configur |
| CVE-2022-22516 | 7.8 HIGH | CODESYS driver SysDrv3S allows SYSTEM users on Microsoft Windows to read and write in rest |
| CVE-2022-22519 | 7.5 HIGH | Special HTTP(s) Requests can cause a buffer-read causing a crash of the webserver and the |
| CVE-2022-22517 | 7.5 HIGH | Communication Components in multiple CODESYS products vulnerable to communication channel |
| CVE-2022-22514 | 7.1 HIGH | Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS. |
| CVE-2022-22518 | 6.5 MEDIUM | A bug in the CODESYS V3 CmpUserMgr component fails to correctly apply a security policy. |
IV. Related Vulnerabilities
Same product: CODESYS Control RTE (SL)
-
CVE-2026-8047
Out-of-bounds Write in CODESYS Control -
CVE-2026-8046
Incorrect Authorization in CODESYS Control -
CVE-2026-3509
CODESYS Control Audit Log Format String DoS -
CVE-2025-41660
CODESYS Control Boot Application Replacement Enables Code Ex -
CVE-2025-41738
CODESYS Control - Invalid type usage in visualization
Same vendor: CODESYS
-
CVE-2026-76992
Uncontrolled Memory Allocation in CODESYS Gateway Client -
CVE-2026-79625
Improper Synchronization in Monitoring in CODESYS Control Ru -
CVE-2026-35226
Out-of-bounds Write in CODESYS PROFINET Controller -
CVE-2026-8047
Out-of-bounds Write in CODESYS Control -
CVE-2026-8046
Incorrect Authorization in CODESYS Control
Same weakness: CWE-476
-
CVE-2026-121522
Possible panic from Git source resolver -
CVE-2026-120955
MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download -
CVE-2026-115297
NULL Pointer Dereference in Packetbeat Leading to Denial of -
CVE-2026-120758
NULL Pointer Dereference in H5HL_unprotect via Corrupted Fil -
CVE-2026-43603
Linux GPU 驱动空指针解引用漏洞致拒绝服务