CVE-2022-32138

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-194

Affected software

No affected versions have been published.

Timeline

Published: Jun 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-321396.5In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial CVE-2022-32149.8Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Ve CVE-2022-321406.5Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer c CVE-2022-321416.5Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, whic CVE-2022-321428.1Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with inval CVE-2022-321438.8In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files CVE-2022-321448.6There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to servi CVE-2022-321456.1A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versi CVE-2022-321486.5Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.Serve CVE-2022-321497.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to pars CVE-2022-32157.5NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 CVE-2022-321519.1The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate autho