CVE-2022-32138

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

Score

CVSS 3.1 8.8 High

Status

Modified - info@cert.vde.com

Published

2022-06-24

Last modified

2024-09-17

Weaknesses

CWE-194

Affected products

• Plcwinnt (Codesys)
• Runtime Toolkit (Codesys)

References

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&downloa…