Read the docs
TI-2022-13874 Aliases CVE-2022-32139GHSA-9gmv-xq53-rfp2

CODESYS runtime system prone to denial of service due to out of bounds read

Priority LOW 31CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

In multiple CODESYS products, a low privileged remote attacker may craft a request, which cause an out-of-bounds read, resulting in a denial-of-service condition. User Interaction is not required.

Why it matters now

EPSS 0.01049 64th percentileScored 2026-11-07
Fix Fixed Runtime Toolkit (CODESYS): V2.4.7.57PLCWinNT (CODESYS): V2.4.7.57

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
CODESYSRuntime ToolkitV2 to before V2.4.7.57V2.4.7.57Patch availableCNA
CODESYSPLCWinNTV2 to before V2.4.7.57V2.4.7.57Patch availableCNA
  • Runtime Toolkit VendorCODESYS Affected V2 to before V2.4.7.57 Fixed in V2.4.7.57 Patch available CNA
  • PLCWinNT VendorCODESYS Affected V2 to before V2.4.7.57 Fixed in V2.4.7.57 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*2.0 to before 2.4.7.57VulnerableCODESYS
cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*2.0 to before 2.4.7.57VulnerableCODESYS
  • cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:* Versions 2.0 to before 2.4.7.57 Vulnerable ·CODESYS
  • cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:* Versions 2.0 to before 2.4.7.57 Vulnerable ·CODESYS

Remediation

  • Fix · CNA Runtime Toolkit (CODESYS) Fixed in V2.4.7.57
  • Fix · CNA PLCWinNT (CODESYS) Fixed in V2.4.7.57

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    CODESYS PLCWinNT, Runtime Toolkit V2.4.7.57

    9 records Highest priority Priority MEDIUM 3 MEDIUM, 6 LOW

    Other records, highest priority first

    • TI-2022-13872 CODESYS Runtime System prone to heap based buffer overflowPriority MEDIUM 41
    • TI-2022-13878 CODESYS runtime system prone to directory accesPriority MEDIUM 40
    • TI-2022-13873 CODESYS runtime system prone to denial of service due to Unexpected Sign ExtensionPriority MEDIUM 40
    Show all 9 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-32139
  2. 2026-10-03 Alias added: GHSA-9gmv-xq53-rfp2

References

Advisory 1

  • TI-2022-13698 Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT CVSS 3.1CRITICAL 9.8
  • TI-2021-10734 CODESYS V2 runtime system before 2.4.7.55 has Improper Input Validation. CVSS 3.1HIGH 7.5
  • TI-2021-10725 CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow. CVSS 3.1HIGH 7.5
  • TI-2022-13872 CODESYS Runtime System prone to heap based buffer overflow CVSS 3.1HIGH 8.8
  • TI-2022-13878 CODESYS runtime system prone to directory acces CVSS 3.1HIGH 8.8
  • TI-2022-13873 CODESYS runtime system prone to denial of service due to Unexpected Sign Extension CVSS 3.1HIGH 8.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences