Aller au contenu
Se connecter
8.1 Élevée

CVE-2022-32142 Multiple CODESYS Products are prone to a out-of bounds read or write access

Description

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Produits et versions touchés

Produit Versions touchées Corrigé en
Runtime Toolkit 2 2 → < 2.4.7.57 2.4.7.57
PLCWinNT 2 2 → < 2.4.7.57 2.4.7.57

Autres CVE de Runtime Toolkit

Les 13 CVE de Runtime Toolkit →
CVE-2026-76992 The CODESYS Gateway Client allocates memory based on a size field in a gateway response without enforcing an appropriate… 8.7 Élevée CVE-2026-79625 Affected products do not properly synchronize access to their monitoring functionality 7.2 Élevée CVE-2025-41659 A low-privileged attacker can remotely access the PKI folder of the CODESYS Control runtime system and thus read and… 8.3 Élevée CVE-2025-41658 CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due… 5.5 Moyenne
Suivre cette CVE