Stack overflow

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

Input validation

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service...

CVE-2022-47393 CODESYS: Multiple products prone to improperly restricted memory operations

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation...

CVE-2022-47393 CODESYS: Multiple products prone to improperly restricted memory operations

An authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation...

CVE-2022-47393

CVE-2022-47393 affects Codesys V3 where the CmpFileTransfer component can be abused after authentication via untrusted pointer dereference, potentially causing a denial-of-service. The cited sources assign a CVSS v3.1 base score of 6.5 (vector: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Affected produ...

CVE-2022-47392 CODESYS: Multiple products prone to Improper Input Validation

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition...

CVE-2022-47392 CODESYS: Multiple products prone to Improper Input Validation

An authenticated, remote attacker may use a improper input validation vulnerability in the CmpApp/CmpAppBP/CmpAppForce Components of multiple CODESYS products in multiple versions to read from an invalid address which can lead to a denial-of-service condition...

CVE-2022-47392

CVE-2022-47392 affects the CODESYS runtime components CmpApp , CmpAppBP , and CmpAppForce . After successful authentication, specially crafted requests with inconsistent content can cause the components to read from an invalid address, leading to a potential denial-of-service condition. The CVSS ...

CVE-2022-47391 CODESYS: Multiple products prone to Improper Input Validation

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service...

CVE-2022-47391 CODESYS: Multiple products prone to Improper Input Validation

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service...

CVE-2022-47391

CVE-2022-47391 affects CODESYS V3 runtimes (CMPDevice component) across multiple versions. An unauthenticated, remote attacker can trigger improper input validation to read invalid addresses, causing a denial of service. Microsoft’s and Nessus-related materials corroborate DoS potential in CODESY...

CVE-2022-47390 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

CVE-2022-47390

CVE-2022-47390 affects CODESYS V3 CMPTraceMgr (and related Stack-based buffer overflow family in the V3 runtime). After authentication, crafted CMPTraceMgr requests can write to the stack, enabling DoS, memory overwriting, or remote code execution per the connected advisories. Affected releases a...

CVE-2022-47389

CVE-2022-47389 is a stack-based out-of-bounds write vulnerability in the CMPTraceMgr component of CODESYS V3, exploitable after authentication and capable of causing DoS, memory overwriting, or remote code execution across multiple products/versions. Connected sources corroborate that this family...

CVE-2022-47389 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

CVE-2022-47388 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

CVE-2022-47388

CVE-2022-47388 affects CODESYS V3, specifically the CMP TraceMgr component, where an authenticated remote attacker can trigger a stack-based out-of-bounds write to write attacker-controlled data to the stack. This can lead to denial-of-service, memory overwrite, or remote code execution across mu...

CVE-2022-47388 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...

CVE-2022-47387

CVE-2022-47387 is a stack-based out-of-bounds write in the CmpTraceMgr component of CODESYS V3. After authentication, crafted requests can write to the stack, enabling Denial-of-Service, memory overwriting, or remote code execution. Additional related CVEs (47378–47390, 47392–47393) in the same C...

CVE-2022-47387 CODESYS: Multiple products prone to stack based out-of-bounds write

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution...