CVE-2022-47389: high-severity vulnerability in CODESYS Control for BeagleBone SL
CODESYS: Multiple products prone to stack based out-of-bounds write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in CODESYS software allows an authenticated attacker to write data beyond the intended stack memory boundaries, potentially crashing the system, corrupting data, or taking control of the affected machine.
Stack-based buffer overflow in CmpTraceMgr component accessible to authenticated remote attackers. The vulnerability enables arbitrary stack memory write operations that can trigger denial-of-service, memory corruption, or arbitrary code execution depending on exploitation context and memory layout.
In the same product, most dangerous first.