cve/2022/CVE-2022-47384.md

### [CVE-2022-47384](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47384)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20RTE%20(SL)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20RTE%20(for%20Beckhoff%20CX)%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20Runtime%20System%20Toolkit&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20Win%20(SL)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20BeagleBone%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20IOT2000%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20Linux%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20PFC100%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20PFC200%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20PLCnext%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20Raspberry%20Pi%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20WAGO%20Touch%20Panels%20600%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Control%20for%20emPC-A%2FiMX6%20SL&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Development%20System%20V3&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20HMI%20(SL)&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Safety%20SIL2%20PSP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=CODESYS%20Safety%20SIL2%20Runtime%20Toolkit&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=V0.0.0.0%3C%20V3.5.19.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=V0.0.0.0%3C%20V4.8.0.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-787%20Out-of-bounds%20Write&color=brighgreen)

### Description

An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/microsoft/CoDe16