← back
CVE-2022-47385

CODESYS: Multiple products prone to stack based out-of-bounds write

CVSS 8.8 HIGHEPSS 1.4%CWE-787
In short

A flaw in CODESYS products allows an authenticated attacker to write data beyond the intended memory limits on the stack, potentially crashing the system, corrupting data, or taking control of the application.

Technical detail

A stack-based buffer overflow in the CmpAppForce Component allows authenticated remote attackers to write arbitrary data past buffer boundaries. This can result in denial-of-service via stack corruption, memory overwriting, or arbitrary code execution depending on exploitation conditions and memory layout.

Summary generated and translated by AI from the official description.
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →