← CVE Intelligence

CVE-2022-32142

CODESYS runtime system prone to denial of service due to use of out of range pointer PUBLISHED

Description (CNA)

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Affected (CNA)

Vendor / productVersions
CODESYS / Runtime Toolkitaffected V2 before V2.4.7.57
CODESYS / PLCWinNTaffected V2 before V2.4.7.57

CWE

CWE-823

References

ADP enrichment

CVE

No English description supplied.