CVE-2022-32140: Codesys Plcwinnt

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.

Affected products

• Codesys Plcwinnt: from 2.0, before 2.4.7.57 (fixed in 2.4.7.57)
• Codesys Runtime Toolkit: from 2.0, before 2.4.7.57 (fixed in 2.4.7.57)

Published 2022-06-24. Last modified 2026-06-17.