Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-32142

CODESYS runtime system prone to denial of service due to use of out of range pointer

Description

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS Runtime Toolkit

  • V2 to < V2.4.7.57affected

CODESYS PLCWinNT

  • V2 to < V2.4.7.57affected

References