Skip to content
OpenAdvisories
High · 8.1 CVE-2022-32142 EUVD-2022-53383GHSA-jv3v-7c3q-8hh2

CODESYS runtime system prone to denial of service due to use of out of range pointer

Published Jun 24, 2022 · Updated Sep 17, 2024 · Assigned by CERTVDE

Description

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Affected products

VendorProductAffectedFixed
CODESYS Runtime Toolkit V2 – < V2.4.7.57 V2.4.7.57
CODESYS PLCWinNT V2 – < V2.4.7.57 V2.4.7.57

Advisories 4

References