PT-2023-4171 · Schneider Electric+1 · Schneider Electric+1
Published
2023-04-03
·
Updated
2023-05-22
·
CVE-2022-47384
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CODESYS (affected versions not specified)
Schneider Electric (affected versions not specified)
Description
The issue is related to a stack-based out-of-bounds write vulnerability in the CmpTraceMgr component. This vulnerability can be exploited by an authenticated remote attacker to write data into the stack, potentially leading to a denial-of-service condition, memory overwriting, or remote code execution.
Recommendations
For CODESYS, update to a version that addresses the out-of-bounds write vulnerability in the CmpTraceMgr component.
For Schneider Electric, update to a version that addresses the out-of-bounds write vulnerability in the CmpTraceMgr component.
As a temporary workaround, consider restricting access to the CmpTraceMgr component until a patch is available.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Codesys
Schneider Electric