CVE-2022-47381: high-severity vulnerability in CODESYS Control for BeagleBone SL
CODESYS: Multiple products prone to stack based out-of-bounds write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in CODESYS products allows an authenticated attacker to write data beyond the intended memory limits on the stack, potentially crashing the system, corrupting memory, or executing malicious code.
Stack-based buffer overflow vulnerability in CODESYS products exploitable by authenticated remote attackers through improper bounds checking. The out-of-bounds write can corrupt stack memory, leading to DoS, memory corruption, or code execution depending on exploit payload and target architecture.
In the same product, most dangerous first.