[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fMLHYb5XMJ41Z9mFmmXD7PSFKCYXQauoQ-_vdjqKTy68":3,"g5a-risk:CVE-2022-32142":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":26,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":53,"references":54,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":26,"otxData":26,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":109,"notableEvents":110},"CVE-2022-32142","What is CVE-2022-32142?","Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a change of local files. User interaction is not required.","Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which ...","2022-06-24T08:15:08.103","2022-07-01T13:39:07.487",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"info@cert.vde.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.2,[30],{"Source":31,"Type":18,"CVSSData":32,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},"nvd@nist.gov",{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":35,"ConfidentialityImpact":23,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:N\u002FI:P\u002FA:P","SINGLE","PARTIAL",5.5,"MEDIUM",8,4.9,0.01053,[41,41,41,41,41,41,41],"High",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"codesys","plcwinnt","*","cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":48,"criteria":52,"vulnerable":4},"runtime_toolkit","cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*",2,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fcustomers.codesys.com\u002Findex.php?eID=dumpFile&t=f&f=17139&token=ec67d15a433b61c77154166c20c78036540cacb0&download=","Codesys",[59,60],"Mitigation","Vendor Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-823","Use of Out-of-range Pointer Offset","The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer.","While a pointer can contain a reference to any arbitrary memory location, a program typically only intends to use the pointer to access limited portions of memory, such as contiguous memory used to access an individual array.\nPrograms may use offsets in order to access fields or sub-elements stored within structured data. The offset might be out-of-range if it comes from an untrusted source, is the result of an incorrect calculation, or occurs because of another error.\nIf an attacker can control or influence the offset so that it points outside of the intended boundaries of the structure, then the attacker may be able to read or write to memory locations that are used elsewhere in the product. As a result, the attack might change the state of the product as accessed through program variables, cause a crash or instable behavior, and possibly lead to code execution.","Incomplete","Base","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2022-32142? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-32142, a high severity cyber security vulnerability from 2022. Multiple CODESYS Products are prone to a out-of bounds read...","CVE-2022-32142, CVE-2022-32142 vulnerability, CVE-2022-32142 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, codesys security, plcwinnt vulnerability, runtime_toolkit vulnerability","\u002Fwhat-is\u002Fcve-2022-32142",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-32142","Cybersecurity","CVE-2022-32142, CVE-2022-32142 vulnerability, CVE-2022-32142 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":26,"Negate":26,"Nodes":100},[101],{"Operator":102,"Negate":26,"CPEMatch":103},"OR",[104,107],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":105,"VersionStartExcluding":26,"VersionStartIncluding":33,"VersionEndExcluding":106,"VersionEndIncluding":26},"2B26FF87-3FCD-496E-97C5-A1E4F6AACCB1","2.4.7.57",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":33,"VersionEndExcluding":106,"VersionEndIncluding":26},"CF74E74E-4EF8-4C84-A9A1-612AB7FC88BA",[],[],{"lastModified":11,"cacheTime":112,"version":33},1792386797413,{"score":114,"band":115,"action":116,"scoredAt":117},47,"Medium","Plan remediation","2026-10-16T06:54:53.470651+00:00"]