Skip to content
Sign in
6.5 Medium

CVE-2022-32141 Multiple CODESYS Products are prone to a buffer over read

Description

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.

Affected products and versions

Product Affected versions Fixed in
Runtime Toolkit 2 2 → < 2.4.7.57 2.4.7.57
PLCWinNT 2 2 → < 2.4.7.57 2.4.7.57

Other CVEs of Runtime Toolkit

The 13 CVEs of Runtime Toolkit →
CVE-2026-76992 The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate… 8.7 High CVE-2026-79625 Affected products do not properly synchronize access to their monitoring functionality 7.2 High CVE-2025-41659 A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and… 8.3 High CVE-2025-41658 CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due… 5.5 Medium
Track this CVE