CVE-2022-32139

published 2022-06-24

CVE-2022-32139: In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
codesys	plcwinnt	>= 2.0 < 2.4.7.57	2.4.7.57
codesys	plcwinnt	>= V2 < V2.4.7.57	V2.4.7.57
codesys	runtime_toolkit	>= 2.0 < 2.4.7.57	2.4.7.57
codesys	runtime_toolkit	>= V2 < V2.4.7.57	V2.4.7.57

CWE-125