CODESYS: Multiple products prone to out-of-bounds write

CVE-2022-47380

What is CVE-2022-47380?

An authenticated remote attacker can exploit a stack-based out-of-bounds write vulnerability present in multiple versions of CODESYS products. This vulnerability allows attackers to manipulate memory, potentially leading to denial-of-service conditions or enabling unauthorized remote code execution. Proper input validation and securing access to these products are crucial to mitigate the risks associated with this vulnerability.

References