CODESYS: Multiple products prone to stack based out-of-bounds write

CVE-2022-47387

What is CVE-2022-47387?

An authenticated attacker could exploit a stack-based out-of-bounds write vulnerability in the CmpTraceMgr component of multiple CODESYS products across various versions. This security flaw allows the attacker to manipulate data within the stack, potentially resulting in a denial-of-service condition, unintended memory overwriting, or unauthorized execution of arbitrary code. It’s crucial for organizations using affected CODESYS products to apply necessary patches to safeguard against this vulnerability.

References