Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-32142

Опубликовано: 24 июн. 2022
Источник: nvd
CVSS3: 8.1
CVSS2: 5.5
EPSS Низкий

Описание

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*
Версия от 2.0 (включая) до 2.4.7.57 (исключая)
cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*
Версия от 2.0 (включая) до 2.4.7.57 (исключая)

EPSS

Процентиль: 73%
0.00787
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-823

Связанные уязвимости

CVSS3: 8.1
github
больше 3 лет назад

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.

EPSS

Процентиль: 73%
0.00787
Низкий

8.1 High

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-823