CVE-2022-32136

published 2022-06-24

CVE-2022-32136: In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
codesys	plcwinnt	>= 2.0 < 2.4.7.57	2.4.7.57
codesys	plcwinnt	>= V2 < V2.4.7.57	V2.4.7.57
codesys	runtime_toolkit	>= 2.0 < 2.4.7.57	2.4.7.57
codesys	runtime_toolkit	>= V2 < V2.4.7.57	V2.4.7.57

CWE-824