CWE:

Nic nie znaleziono w bazie WLB2

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2022-06-24

Medium

CVE-2022-32138

Vendor: Codesys Software: Runtime toolkit

In multiple CODESYS products, a remote attacker may craft a request which may cause an unexpected sign extension, resulting in a denial-of-service condition or memory overwrite.

2021-10-18

Medium

CVE-2021-38434

Vendor: Fatek Software: Winproladder

FATEK Automation WinProladder versions 3.30 and prior lacks proper validation of user-supplied data when parsing project files, which could result in an unexpected sign extension. An attacker could leverage this vulnerability to execute arbitrary code.

 

---

Copyright 2024, cxsecurity.com