7.5
High
CVE-2022-31805 In the CODESYS Development System multiple components in multiple versions transmit the passwords for the…
Description
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Development System 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS Development System 2 | 2 → < 2.3.9.69 | 2.3.9.69 |
| CODESYS Gateway Client 2 | 2 → < 2.3.9.38 | 2.3.9.38 |
| CODESYS Gateway Server 2 | 2 → < 2.3.9.38 | 2.3.9.38 |
| CODESYS Web server 1 | 1 → < 1.1.9.23 | 1.1.9.23 |
| CODESYS SP Realtime NT 2 | 2 → < 2.3.7.30 | 2.3.7.30 |
| CODESYS PLCWinNT 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| CODESYS Runtime Toolkit 32 bit full 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| CODESYS Edge Gateway for Windows 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
Show the 4 other branches Hide the 4 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS HMI (SL) 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS OPC DA Server SL 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS PLCHandler 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS Gateway 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
References
- customers.codesys.com customers.codesys.com
Timeline
- Published
- Last modified
Other CVEs of CODESYS Development System
The 8 CVEs of CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
High
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation
8.5
High
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
High
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Low