Lucene search
CERTVDECVELIST:CVE-2022-32136HistoryJun 24, 2022 - 7:46 a.m.
CVE-2022-32136 Codesys runtime systems: Access of uninitialised pointer lead to denial of service.
2022-06-2407:46:18
CWE-824
CERTVDE
www.cve.org
4
cve-2022-32136 codesys denial-of-service uninitialized-pointer
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
50.1%
In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.
CNA Affected
[
{
"platforms": [
"32 bit"
],
"product": "Runtime Toolkit",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V2.4.7.57",
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
},
{
"product": "PLCWinNT",
"vendor": "CODESYS",
"versions": [
{
"lessThan": "V2.4.7.57",
"status": "affected",
"version": "V2",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-32136
2022-06-24 08:15:07
prion
prion
Null pointer dereference
2022-06-24 08:15:00
cve
cve
CVE-2022-32136
2022-06-24 08:15:07
thn
thn
Critical Security Flaws Identified in CODESYS ICS Automation Software
2022-06-27 10:35:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
50.1%
Related for CVELIST:CVE-2022-32136