CVE-2022-32142highCWE-823

CVE-2022-32142: high-severity vulnerability in CODESYS PLCWinNT

CODESYS runtime system prone to denial of service due to use of out of range pointer

Published · Updated

Follow this CVE+ Monitor Runtime Toolkit+ Monitor PLCWinNT

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 1.1%
In short

CODESYS runtime systems can be crashed or have their memory corrupted by a remote attacker sending specially crafted requests with invalid offsets. This happens because the software doesn't properly validate memory access boundaries, allowing attackers to read or write data outside intended memory areas.

Technical detail

Out-of-bounds read/write vulnerability in CODESYS runtime triggered by remote attacker crafting requests with invalid memory offsets, exploitable without authentication or user interaction. Exploitation results in denial of service via memory corruption or potential local file modification through uncontrolled memory write access.

Summary generated and translated by AI from the official description.
Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Affected products
CODESYS · PLCWinNTCODESYS · Runtime Toolkit
Related CVEs — CODESYS PLCWinNT

In the same product, most dangerous first.

CVE-2022-32137HIGHCODESYS Runtime System prone to heap based buffer overflowEPSS 1.4%CVE-2022-32143HIGHCODESYS runtime system prone to directory accesEPSS 1.2%CVE-2022-32138HIGHCODESYS runtime system prone to denial of service due to Unexpected Sign ExtensionEPSS 1.2%CVE-2022-1965HIGHCODESYS runtime system prone to file deletion due to improper error handlingEPSS 1.1%CVE-2022-32140MEDIUMCODESYS runtime system prone to denial of service due to buffer copyEPSS 1.1%CVE-2022-32141MEDIUMCODESYS runtime system prone to denial of service due to buffer over readEPSS 1.0%