Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-32136

Codesys runtime systems: Access of uninitialised pointer lead to denial of service.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS Runtime Toolkit

  • V2 to < V2.4.7.57affected

CODESYS PLCWinNT

  • V2 to < V2.4.7.57affected

References