CVE-2022-47379

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
CODESYSCODESYS Control RTE (SL)>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Control RTE (for Beckhoff CX) SL>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Control Win (SL)>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Control Runtime System Toolkit>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Safety SIL2 Runtime Toolkit>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Safety SIL2 PSP>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS HMI (SL)>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Development System V3>= V0.0.0.0, < V3.5.19.0
CODESYSCODESYS Control for BeagleBone SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for emPC-A/iMX6 SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for IOT2000 SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for Linux SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for PFC100 SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for PFC200 SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for PLCnext SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for Raspberry Pi SL>= V0.0.0.0, < V4.8.0.0
CODESYSCODESYS Control for WAGO Touch Panels 600 SL>= V0.0.0.0, < V4.8.0.0

References

Timeline

Published
May 15, 2023
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-47386.1A vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is an unknown functionCVE-2022-473808.8An authenticated remote attacker may use a stack based  out-of-bounds write vulnerability in multiple CODESYS products in multiple versions CVE-2022-473818.8An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions tCVE-2022-473828.8An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS prCVE-2022-473838.8An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS pCVE-2022-473848.8An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS prCVE-2022-473858.8An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpAppForce Component of multiple CODESYS pCVE-2022-473868.8An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS pCVE-2022-473878.8An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS prCVE-2022-473888.8An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS pCVE-2022-473898.8An authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS pCVE-2022-47399.8A vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0. Affected by this vulnerability is
CVE-2022-47379: High severity, CVSS 8.8 | Vulnix