CVE-2022-32140

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Multiple CODESYS products are affected to a buffer overflow.A low privileged remote attacker may craft a request, which can cause a buffer copy without checking the size of the service, resulting in a denial-of-service condition. User Interaction is not required.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published: Jun 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-321416.5Multiple CODESYS Products are prone to a buffer over read. A low privileged remote attacker may craft a request with an invalid offset, whic CVE-2022-321428.1Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with inval CVE-2022-321438.8In multiple CODESYS products, file download and upload function allows access to internal files in the working directory e.g. firmware files CVE-2022-321448.6There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to servi CVE-2022-321456.1A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versi CVE-2022-321486.5Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.Serve CVE-2022-321497.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to pars CVE-2022-32157.5NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 CVE-2022-321519.1The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate autho CVE-2022-321527.2Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS CVE-2022-321538.1Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS CVE-2022-321548.1Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is u