CODESYS runtime system prone to denial of service due to use of out of range pointer

CVE-2022-32142

What is CVE-2022-32142?

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

References