medium6.5
CVE-2022-32141
Multiple CODESYS Products are prone to a buffer over read.
Impact
Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Plcwinnt | from 2.0 before 2.4.7.57 |
| Codesys | Runtime Toolkit | from 2.0 before 2.4.7.57 |