high7.5
CVE-2022-31805
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Impact
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesys | Development System | before 2.3.9.69 |
| Codesys | Edge Gateway | before 3.5.18.30 |
| Codesys | Gateway | before 2.3.9.38 |
| Codesys | Hmi Sl | before 3.5.18.30 |
| Codesys | Opc Server | before 3.5.18.30 |
| Codesys | Plchandler | before 3.5.18.30 |
| Codesys | Plcwinnt | before 2.4.7.57 |
| Codesys | Runtime Toolkit | before 2.4.7.57 |
| Codesys | Sp Realtime Nt | before 2.3.7.30 |
| Codesys | Web Server | before 1.1.9.23 |