CVE-2022-47379: codesys codesys control for beaglebone sl Out-of-bounds Write

Vulnerability summary

CVE-2022-47379 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in codesys codesys control for beaglebone sl. EPSS estimates a 1.97% chance of exploitation in the next 30 days, higher than 80.1% of scored vulnerabilities.

Timeline

1. 15-05-2023
   PublishedVulnerability first disclosed.
2. 05-03-2025
   Last modifiedVulnerability information updated.

Description

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.