CVE-2022-47388: high-severity vulnerability in CODESYS Control for BeagleBone SL
CODESYS: Multiple products prone to stack based out-of-bounds write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in CODESYS products allows an authenticated attacker to write data beyond allocated memory boundaries on the stack, potentially crashing the system, corrupting data, or executing malicious code remotely.
Stack-based buffer overflow in CmpTraceMgr component affecting multiple CODESYS versions. An authenticated remote attacker can overwrite stack memory through improper input validation, leading to DoS, memory corruption, or RCE depending on exploitation context and memory layout.
In the same product, most dangerous first.