CVE-2022-32142

CVE-2022-32142 affects multiple CODESYS products; an attacker with low privileges can craft requests with invalid offsets to trigger an out-of-bounds read/write, causing DoS or local memory overwrite and potentially changing local files. Descriptions consistently state no user interaction is requ...

CVE-2022-32138 CODESYS runtime system prone to denial of service due to Unexpected Sign Extension

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

CVE-2022-32138

CVE-2022-32138 affects multiple CODESYS products. A remote attacker can craft a request that triggers an unexpected sign extension, leading to denial-of-service or memory overwrite. The CVSS scores indicate high impact (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected detail on exact products, vers...

CVE-2022-32137 CODESYS Runtime System prone to heap based buffer overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

CVE-2022-32137

In CVE-2022-32137, multiple CODESYS products are affected by a heap-based buffer overflow that an unauthenticated, low-privilege remote attacker can trigger by crafting a request. This condition can result in a Denial of Service or a memory overwrite, with no user interaction required. The NVD en...

PT-2022-3271

Name of the Vulnerable Software and Affected Versions CODESYS products affected versions not specified Description A low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction i...

CVE-2022-32142: Use of Out-of-range Pointer Offset

Multiple CODESYS Products are prone to a out-of bounds read or write access. A low privileged remote attacker may craft a request with invalid offset, which can cause an out-of-bounds read or write access, resulting in denial-of-service condition or local memory overwrite, which can lead to a...

CVE-2022-32137: Heap-based Buffer Overflow

In multiple CODESYS products, a low privileged remote attacker may craft a request, which may cause a heap-based buffer overflow, resulting in a denial-of-service condition or memory overwrite. User interaction is not required...

CODESYS 安全漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions CODESYS A security vulnerability exists in several products, which could be exploited by a low-privileged remote attacker to craft requests, which could result in a heap-based buffer overflow that could lead to ...

CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A buffer error vulnerability exists in several CODESYS products and stems from a lack of internal buffer read limits in the application. An attacker can exploit this vulnerability by crafting requests with...

PT-2022-21115

Name of the Vulnerable Software and Affected Versions CODESYS Products affected versions not specified Description The issue is related to out-of-bounds read or write access. A low-privileged remote attacker can craft a request with an invalid offset, causing an out-of-bounds read or write access...

CVE-2022-32138: Unexpected Sign Extension

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite...

PT-2022-21111

Name of the Vulnerable Software and Affected Versions CODESYS products affected versions not specified Description A remote attacker may craft a request that causes an unexpected sign extension, potentially resulting in a denial-of-service condition or memory overwrite. Recommendations At the...

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

Design/Logic Flaw

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

CVE-2021-40036

The bone voice ID TA has a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution...

CVE-2021-40036

CVE-2021-40036 relates to Huawei/HarmonyOS, specifically the bone voice ID TA component, where a memory overwrite vulnerability can allow malicious code execution. Multiple connected sources (NVD, RH, CNVD/CNNVD, CNVD, CVE listings) consistently describe a memory overwrite flaw in the bone voice ...

PT-2022-11158

Name of the Vulnerable Software and Affected Versions bone voice ID TA affected versions not specified Description The issue is related to a memory overwrite vulnerability. Successful exploitation of this vulnerability may result in malicious code execution. Recommendations At the moment, there i...