VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-32141

CVE-2022-32141

Description

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.

Affected products

5
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Runtime Toolkit2 versions
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Gitllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.