high8.8
CVE-2022-47390
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple…
Impact
An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Control For Beaglebone Sl | before 4.8.0.0 |
| Codesys | Control For Empc-A\/Imx6 Sl | before 4.8.0.0 |
| Codesys | Control For Iot2000 Sl | before 4.8.0.0 |
| Codesys | Control For Linux Sl | before 4.8.0.0 |
| Codesys | Control For Pfc100 Sl | before 4.8.0.0 |
| Codesys | Control For Pfc200 Sl | before 4.8.0.0 |
| Codesys | Control For Plcnext Sl | before 4.8.0.0 |
| Codesys | Control For Raspberry Pi Sl | before 4.8.0.0 |
| Codesys | Control For Wago Touch Panels 600 Sl | before 4.8.0.0 |
| Codesys | Control Rte \(For Beckhoff Cx\) Sl | before 3.5.19.0 |
| Codesys | Control Rte \(Sl\) | before 3.5.19.0 |
| Codesys | Control Runtime System Toolkit | before 3.5.19.0 |