CVE-2022-32136 - Codesys runtime systems: Access of uninitialised pointer lead to denial of service.

Back Back to CVE browser

MEDIUM

Codesys runtime systems: Access of uninitialised pointer lead to denial of service.

Published Jun 24, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 1.02%

Description

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

Affected products

Vendor Codesys Product PLCWinNT Default
n/a
- Version
  V2
  Status
  affected
  Constraints
  <V2.4.7.57
Vendor Codesys Product Runtime Toolkit Default
n/a
- Version
  V2
  Status
  affected
  Constraints
  <V2.4.7.57

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Codesys

PLCWinNT

n/a

Version	Status	Constraints
V2	affected	<V2.4.7.57

Codesys

Runtime Toolkit

n/a

Version	Status	Constraints
V2	affected	<V2.4.7.57

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-824

References (1)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=
x_refsource_CONFIRMMitigationVendor Advisory

Link	Providers	Tags
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=		x_refsource_CONFIRMMitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner CERTVDE

Published Jun 24, 2022

Updated Sep 16, 2024

Reserved May 31, 2022

Link CVE-2022-32136

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-32136

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-32136