← back
CVE-2022-47388

CODESYS: Multiple products prone to stack based out-of-bounds write

CVSS 8.8 HIGHEPSS 1.3%CWE-787
In short

A flaw in CODESYS products allows an authenticated attacker to write data beyond allocated memory boundaries on the stack, potentially crashing the system, corrupting data, or executing malicious code remotely.

Technical detail

Stack-based buffer overflow in CmpTraceMgr component affecting multiple CODESYS versions. An authenticated remote attacker can overwrite stack memory through improper input validation, leading to DoS, memory corruption, or RCE depending on exploitation context and memory layout.

Summary generated and translated by AI from the official description.
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →