CODESYS: Multiple products prone to stack based out-of-bounds write

CVE-2022-47384

What is CVE-2022-47384?

An authenticated remote attacker can exploit a stack-based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products. This vulnerability allows attackers to write data into the stack, potentially resulting in a denial-of-service condition, memory overwriting, or even remote code execution. Organizations utilizing affected CODESYS versions should urgently assess and mitigate the risks associated with this vulnerability to safeguard their systems.

References