CVE-2022-32137: high-severity vulnerability in CODESYS PLCWinNT
CODESYS Runtime System prone to heap based buffer overflow
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in CODESYS Runtime System allows a remote attacker to send a specially crafted request that overflows a memory buffer, potentially crashing the system or corrupting data without needing user interaction.
A heap-based buffer overflow exists in CODESYS products where an unauthenticated remote attacker can craft a malicious request to trigger the overflow, leading to denial-of-service or arbitrary memory corruption. The attack requires no user interaction and can be exploited by a low-privileged network participant.
In the same product, most dangerous first.