What is CVE-2022-32142?

CVE-2022-32142 is a vulnerability in multiple CODESYS Products that allows for out-of-bounds read or write access, leading to denial-of-service or local memory overwrite.

How can a low privileged remote attacker exploit CVE-2022-32142?

A low privileged remote attacker can exploit CVE-2022-32142 by crafting a request with an invalid offset, causing an out-of-bounds read or write access.

What is the severity of CVE-2022-32142?

CVE-2022-32142 has a severity rating of 8.1 (high).

Which CODESYS Products are affected by CVE-2022-32142?

CODESYS PLCWinNT and Codesys Runtime Toolkit versions 2.0 to 2.4.7.57 are affected by CVE-2022-32142.

What is the Common Weakness Enumeration (CWE) ID for CVE-2022-32142?

The CWE ID for CVE-2022-32142 is CWE-823.

Vulnerability/
CVE-2022-32142

high

8.1

CWE

823

24/6/2022

17/9/2024

CVE-2022-32142: CODESYS runtime system prone to denial of service due to use of out of range pointer

First published: Fri Jun 24 2022(Updated: )

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Credit: info@cert.vde.com

Affected Software	Affected Version	How to fix
CODESYS PLCWinNT	>=2.0<2.4.7.57
Codesys Runtime Toolkit	>=2.0<2.4.7.57

Never miss a vulnerability like this again

Reference Links

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=

Frequently Asked Questions

What is CVE-2022-32142?
CVE-2022-32142 is a vulnerability in multiple CODESYS Products that allows for out-of-bounds read or write access, leading to denial-of-service or local memory overwrite.
How can a low privileged remote attacker exploit CVE-2022-32142?
A low privileged remote attacker can exploit CVE-2022-32142 by crafting a request with an invalid offset, causing an out-of-bounds read or write access.
What is the severity of CVE-2022-32142?
CVE-2022-32142 has a severity rating of 8.1 (high).
Which CODESYS Products are affected by CVE-2022-32142?
CODESYS PLCWinNT and Codesys Runtime Toolkit versions 2.0 to 2.4.7.57 are affected by CVE-2022-32142.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-32142?
The CWE ID for CVE-2022-32142 is CWE-823.

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/author
agent/severity
agent/references
agent/title
agent/first-publish-date
agent/tags
agent/event
agent/description
vendor/codesys
canonical/codesys plcwinnt
version/codesys plcwinnt/2.0
canonical/codesys runtime toolkit
version/codesys runtime toolkit/2.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.