CODESYS: Multiple products prone to stack based out-of-bounds write

CVE-2022-47389

What is CVE-2022-47389?

An authenticated remote attacker can exploit a stack-based out-of-bounds write vulnerability in the CmpTraceMgr Component of various CODESYS products. This flaw allows attackers to manipulate the stack to potentially overwrite memory, leading to a denial-of-service condition or enabling remote code execution. It underscores the importance of applying security patches and maintaining robust access controls to mitigate such vulnerabilities.

References