high8.1
CVE-2022-1965
Multiple products of CODESYS implement a improper error handling.
Impact
Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction is not required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Plcwinnt | from 2.0 before 2.4.7.57 |
| Codesys | Runtime Toolkit | from 2.0 before 2.4.7.57 |