VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-32138

CVE-2022-32138

Description

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

Affected products

5
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Runtime Toolkit2 versions
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Gitllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.