Skip to content
Sign in
6.5 Medium

CVE-2022-32140 Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request,…

Description

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.

Affected products and versions

Product Affected versions Fixed in
Runtime Toolkit 2 2 → < 2.4.7.57 2.4.7.57
PLCWinNT 2 2 → < 2.4.7.57 2.4.7.57

Other CVEs of Runtime Toolkit

The 13 CVEs of Runtime Toolkit →
CVE-2026-76992 The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate… 8.7 High CVE-2026-79625 Affected products do not properly synchronize access to their monitoring functionality 7.2 High CVE-2025-41659 A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and… 8.3 High CVE-2025-41658 CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due… 5.5 Medium
Track this CVE