CVE-2022-32141: Codesys Plcwinnt

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, which can cause an internal buffer over-read, resulting in a denial-of-service condition. User interaction is not required.

Affected products

• Codesys Plcwinnt: from 2.0, before 2.4.7.57 (fixed in 2.4.7.57)
• Codesys Runtime Toolkit: from 2.0, before 2.4.7.57 (fixed in 2.4.7.57)

Published 2022-06-24. Last modified 2026-06-17.