Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-31805

Insecure transmission of credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CODESYS CODESYS Development System

Default version status: unaffected

  • V2 to < V2.3.9.69affected
  • V3 to < V3.5.18.30affected

CODESYS CODESYS Gateway Client

Default version status: unaffected

  • V2 to < V2.3.9.38affected

CODESYS CODESYS Gateway Server

Default version status: unaffected

  • V2 to < V2.3.9.38affected

CODESYS CODESYS Web server

Default version status: unaffected

  • V1 to < V1.1.9.23affected

CODESYS CODESYS SP Realtime NT

Default version status: unaffected

  • V2 to < V2.3.7.30affected

CODESYS CODESYS PLCWinNT

Default version status: unaffected

  • V2 to < V2.4.7.57affected

CODESYS CODESYS Runtime Toolkit 32 bit full

Default version status: unaffected

  • V2 to < V2.4.7.57affected

CODESYS CODESYS Edge Gateway for Windows

Default version status: unaffected

  • V3 to < V3.5.18.30affected

CODESYS CODESYS HMI (SL)

Default version status: unaffected

  • V3 to < V3.5.18.30affected

CODESYS CODESYS OPC DA Server SL

Default version status: unaffected

  • V3 to < V3.5.18.30affected

CODESYS CODESYS PLCHandler

Default version status: unaffected

  • V3 to < V3.5.18.30affected

CODESYS CODESYS Gateway

Default version status: unaffected

  • V3 to < V3.5.18.30affected

References