CVE-2022-32136

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

Score

CVSS 3.1 6.5 Medium

Status

Modified - info@cert.vde.com

Published

2022-06-24

Last modified

2024-09-16

Weaknesses

CWE-824

Affected products

• Plcwinnt (Codesys)
• Runtime Toolkit (Codesys)

References

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&downloa…