CODESYS: Multiple products prone to stack based out-of-bounds write

CVE-2022-47382

What is CVE-2022-47382?

An authenticated remote attacker can exploit a stack-based out-of-bounds write vulnerability in the CmpTraceMgr Component found in several CODESYS products across multiple versions. This vulnerability allows attackers to manipulate the stack by writing arbitrary data, potentially leading to a denial-of-service condition, the corruption of memory, or remote code execution. Organizations using these CODESYS products should review their security posture and apply appropriate updates or mitigations.

References