6.5
Moyenne
CVE-2022-32141 Multiple CODESYS Products are prone to a buffer over read
Description
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Runtime Toolkit 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| PLCWinNT 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
Autres CVE de Runtime Toolkit
Les 13 CVE de Runtime Toolkit →
CVE-2026-76992
The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate…
8.7
Élevée
CVE-2026-79625
Affected products do not properly synchronize access to their monitoring functionality
7.2
Élevée
CVE-2025-41659
A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and…
8.3
Élevée
CVE-2025-41658
CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due…
5.5
Moyenne