CVE-2022-32142 CODESYS runtime system prone to denial of service due to use of out of range pointer
HighCVSS 8.1
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Runtime Toolkit | >= V2, < V2.4.7.57 | V2.4.7.57 |
| CODESYS plcwinnt | >= V2, < V2.4.7.57 | V2.4.7.57 |
| CODESYS plcwinnt | >= 2.0, < 2.4.7.57 | 2.4.7.57 |
| CODESYS Runtime Toolkit | >= 2.0, < 2.4.7.57 | 2.4.7.57 |
References
- customers.codesys.com mitigation vendor-advisory