VYPR
← All advisories
High severity8.1NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026

CVE-2022-32142

CVE-2022-32142

Description

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Affected products

5
  • Codesys/PLCWinNT2 versions
    cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Runtime Toolkit2 versions
    cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*+ 1 more
    • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*range: >=2.0,<2.4.7.57
    • (no CPE)range: V2
  • Codesys/Gitllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.