CVE-2022-32137

CVE-2022-32137 describes a heap-based buffer overflow vulnerability in multiple CODESYS products, specifically PLCWinNT and Runtime Toolkit. A low-privileged remote attacker can exploit this without user interaction, potentially leading to a denial-of-service condition or memory overwrite. With a CVSS score of 8.8 (High), this vulnerability poses a significant risk due to its network attack vector and low attack complexity, allowing for high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is unavailable, with minimal community discussion.