high8.8
CVE-2022-32137
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-serv…
Impact
In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Plcwinnt | from 2.0 before 2.4.7.57 |
| Codesys | Runtime Toolkit | from 2.0 before 2.4.7.57 |