← back
CVE-2022-47381

CODESYS: Multiple products prone to stack based out-of-bounds write

CVSS 8.8 HIGHEPSS 1.3%CWE-787
In short

A flaw in CODESYS products allows an authenticated attacker to write data beyond the intended memory limits on the stack, potentially crashing the system, corrupting memory, or executing malicious code.

Technical detail

Stack-based buffer overflow vulnerability in CODESYS products exploitable by authenticated remote attackers through improper bounds checking. The out-of-bounds write can corrupt stack memory, leading to DoS, memory corruption, or code execution depending on exploit payload and target architecture.

Summary generated and translated by AI from the official description.
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →