CODESYS V2 runtime system prior to 2.4.7.55 has Improper Input Validation.
codesys plcwinnt
codesys runtime toolkit