CVE-2022-32136

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In multiple CODESYS products, a low privileged remote attacker may craft a request that cause a read access to an uninitialized pointer, resulting in a denial-of-service. User interaction is not required.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-824

Affected software

No affected versions have been published.

Timeline

Published: Jun 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-321378.8In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting CVE-2022-321388.8In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-s CVE-2022-321396.5In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial CVE-2022-32149.8Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Ve CVE-2022-321406.5Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer c CVE-2022-321416.5Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, whic CVE-2022-321428.1Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with inval CVE-2022-321438.8In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files CVE-2022-321448.6There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to servi CVE-2022-321456.1A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versi CVE-2022-321486.5Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.Serve CVE-2022-321497.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to pars