CVE-2022-47385: high-severity vulnerability in CODESYS Control for BeagleBone SL
CODESYS: Multiple products prone to stack based out-of-bounds write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in CODESYS products allows an authenticated attacker to write data beyond the intended memory limits on the stack, potentially crashing the system, corrupting data, or taking control of the application.
A stack-based buffer overflow in the CmpAppForce Component allows authenticated remote attackers to write arbitrary data past buffer boundaries. This can result in denial-of-service via stack corruption, memory overwriting, or arbitrary code execution depending on exploitation conditions and memory layout.
In the same product, most dangerous first.