CVE-2022-47390

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

• codesys control for beaglebone sl (< 4.8.0.0) • codesys control for empc-a\/imx6 sl (< 4.8.0.0) • codesys control for iot2000 sl (< 4.8.0.0) • codesys control for linux sl (< 4.8.0.0) • codesys control for pfc100 sl (< 4.8.0.0) • codesys control for pfc200 sl (< 4.8.0.0) • codesys control for plcnext sl (< 4.8.0.0) • codesys control for raspberry pi sl (< 4.8.0.0) • codesys control for wago touch panels 600 sl (< 4.8.0.0) • codesys control rte \(for beckhoff cx\) sl (< 3.5.19.0) • codesys control rte \(sl\) (< 3.5.19.0) • codesys control runtime system toolkit (< 3.5.19.0) • codesys control win \(sl\) (< 3.5.19.0) • codesys development system v3 (< 3.5.19.0) • codesys hmi \(sl\) (< 3.5.19.0) • codesys safety sil2 psp (< 3.5.19.0) • codesys safety sil2 runtime toolkit (< 3.5.19.0)