CVE-2022-47380: codesys codesys control for beaglebone sl Out-of-bounds Write

Vulnerability summary

CVE-2022-47380 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in codesys codesys control for beaglebone sl. EPSS estimates a 1.32% chance of exploitation in the next 30 days, higher than 70.4% of scored vulnerabilities.

Timeline

1. 15-05-2023
   PublishedVulnerability first disclosed.
2. 05-03-2025
   Last modifiedVulnerability information updated.

Description

An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.