PT-2023-4171 · Schneider Electric+1 · Schneider Electric+1
CVE-2022-47384
·
Publicado
2023-04-03
·
Atualizado
2023-05-22
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CODESYS (affected versions not specified)
Schneider Electric (affected versions not specified)
Description
The issue is related to a stack-based out-of-bounds write vulnerability in the CmpTraceMgr component. This vulnerability can be exploited by an authenticated remote attacker to write data into the stack, potentially leading to a denial-of-service condition, memory overwriting, or remote code execution.
Recommendations
For CODESYS, update to a version that addresses the out-of-bounds write vulnerability in the CmpTraceMgr component.
For Schneider Electric, update to a version that addresses the out-of-bounds write vulnerability in the CmpTraceMgr component.
As a temporary workaround, consider restricting access to the CmpTraceMgr component until a patch is available.
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Codesys
Schneider Electric