CVE-2022-47380
published 2023-05-15CVE-2022-47380: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into…
PriorityP357high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.33%
68.2th percentile
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
Affected
34 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| codesys | codesys_control_for_beaglebone_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_empc-a_imx6_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_iot2000_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_linux_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_pfc100_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_pfc200_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_plcnext_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_raspberry_pi_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_for_wago_touch_panels_600_sl | >= V0.0.0.0 < V4.8.0.0 | V4.8.0.0 |
| codesys | codesys_control_rte | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_control_rte_sl | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_control_runtime_system_toolkit | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_control_win | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_development_system_v3 | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_hmi | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_safety_sil2_psp | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | codesys_safety_sil2_runtime_toolkit | >= V0.0.0.0 < V3.5.19.0 | V3.5.19.0 |
| codesys | control_for_beaglebone_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_empc-a_imx6_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_iot2000_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_linux_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc100_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_pfc200_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_plcnext_sl | < 4.8.0.0 | 4.8.0.0 |
| codesys | control_for_raspberry_pi_sl | < 4.8.0.0 | 4.8.0.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
CODESYS in Festo Automation Suite
cisa_ics·2026-03-17
CODESYS in Festo Automation Suite
ICS Advisory
##
CODESYS in Festo Automation Suite
Release DateMarch 17, 2026
Alert CodeICSA-26-076-01
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
3. TECHNICAL DETAILS
The following versions of CODESYS in Festo Automation Suite are affected:
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation Suite (versions prior to 2.8.0.138) installed with CODESYS Software CODESYS Development System (3.5.16.10) vers:all/*
- FESTO Software Festo Automation Suite (2.8.0.137) installed with CODESYS Software CODESYS Development System (3.0) vers:all/*
- FESTO Software Festo Automation
CISA ICS
Schneider Electric devices using CODESYS Runtime
cisa_ics·2026-01-20·CVSS 8.8
[HIGH] Schneider Electric devices using CODESYS Runtime
ICS Advisory
##
Schneider Electric devices using CODESYS Runtime
Release DateJanuary 20, 2026
Alert CodeICSA-26-020-02
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
View CSAF
## Summary
Schneider Electric is aware of multiple vulnerabilities disclosed on CODESYS runtime system V3 communication server. Many vendors, including Schneider Electric, embed CODESYS in their offers. If successfully exploited, these vulnerabilities could result in a denial of service or, in some cases, in remote code execution on PacDrive controllers, Modicon Controllers M241 / M251 / M262 / M258 / LMC058 / LMC078 / M218 , HMISCU, the Simulation Runtime SoftSPS from EcoStruxure Machine Expert and EcoStruxure Microgrid Operation products. Failure
CISA ICS
Rockwell Automation LP30/40/50 and BM40 Operator Interface
cisa_ics·2024-01-30·CVSS 6.5
[MEDIUM] Rockwell Automation LP30/40/50 and BM40 Operator Interface
ICS Advisory
##
Rockwell Automation LP30/40/50 and BM40 Operator Interface
Release DateJanuary 30, 2024
Alert CodeICSA-24-030-07
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 8.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Rockwell Automation
- Equipment: LP30, LP40, LP50, and BM40 Operator Panels
- Vulnerability: Improper Validation of Consistency within Input, Out-of-bounds Write, Stack-based Buffer Overflow, Untrusted Pointer Dereference
## 2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an authenticated attacker to use specifically crafted communication requests to perform a denial-of-service condition, memory overwriting, or remote code execution.
## 3. TECHNICAL DETAILS
## 3.1 AFFECTED PRODUCTS
T
GHSA
GHSA-5m8c-qqq3-wm8x: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write da
ghsa_unreviewed·2023-07-06
CVE-2022-47380 [HIGH] CWE-787 GHSA-5m8c-qqq3-wm8x: An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write da
An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead to a denial-of-service condition, memory overwriting, or remote code execution.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-15
Published