CVE-2022-31805: Insecure transmission of credentials
CODESYS · CODESYS Development System
Vendor fix available · Affected: CODESYS Development System · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 65% of scored CVEs
DescriptionCVE.org
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Affected products12
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- CODESYS · CODESYS Development Systemfrom V2 before V2.3.9.69; from V3 before V3.5.18.30
- CODESYS · CODESYS Gateway Clientfrom V2 before V2.3.9.38
- CODESYS · CODESYS Gateway Serverfrom V2 before V2.3.9.38
- CODESYS · CODESYS Web serverfrom V1 before V1.1.9.23
- CODESYS · CODESYS SP Realtime NTfrom V2 before V2.3.7.30
- CODESYS · CODESYS PLCWinNTfrom V2 before V2.4.7.57
- CODESYS · CODESYS Runtime Toolkit 32 bit fullfrom V2 before V2.4.7.57
- CODESYS · CODESYS Edge Gateway for Windowsfrom V3 before V3.5.18.30
- CODESYS · CODESYS HMI (SL)from V3 before V3.5.18.30
- CODESYS · CODESYS OPC DA Server SLfrom V3 before V3.5.18.30
- CODESYS · CODESYS PLCHandlerfrom V3 before V3.5.18.30
- CODESYS · CODESYS Gatewayfrom V3 before V3.5.18.30
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2022-31805 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.