CVE-2022-32138: falha de alta gravidade em CODESYS PLCWinNT
CODESYS runtime system prone to denial of service due to Unexpected Sign Extension
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.8epss 1.2%
In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEs relacionadas — CODESYS PLCWinNT
No mesmo produto, das mais perigosas para as menos.
CVE-2022-32137HIGHCODESYS Runtime System prone to heap based buffer overflowEPSS 1.4%CVE-2022-32143HIGHCODESYS runtime system prone to directory accesEPSS 1.2%CVE-2022-32142HIGHCODESYS runtime system prone to denial of service due to use of out of range pointerEPSS 1.1%CVE-2022-1965HIGHCODESYS runtime system prone to file deletion due to improper error handlingEPSS 1.1%CVE-2022-32140MEDIUMCODESYS runtime system prone to denial of service due to buffer copyEPSS 1.1%CVE-2022-32141MEDIUMCODESYS runtime system prone to denial of service due to buffer over readEPSS 1.0%