CVE-2022-47390: high-severity vulnerability in CODESYS Control for BeagleBone SL
CODESYS: Multiple products prone to stack based out-of-bounds write
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A flaw in CODESYS software allows an authenticated attacker to write data beyond the intended memory boundary on the stack, potentially crashing the system, corrupting memory, or taking control of the application.
Stack-based buffer overflow in CmpTraceMgr component accessible to authenticated remote attackers; exploitation via malformed input can overwrite adjacent stack memory, enabling DoS, arbitrary code execution, or application compromise depending on memory layout and mitigations.
In the same product, most dangerous first.