VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-32137

CVE-2022-32137

Description

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.

Affected products

5
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Runtime Toolkit2 versions
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Gitllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.