7.5
Élevée
CVE-2022-31805 In the CODESYS Development System multiple components in multiple versions transmit the passwords for the…
Description
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS Development System 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS Development System 2 | 2 → < 2.3.9.69 | 2.3.9.69 |
| CODESYS Gateway Client 2 | 2 → < 2.3.9.38 | 2.3.9.38 |
| CODESYS Gateway Server 2 | 2 → < 2.3.9.38 | 2.3.9.38 |
| CODESYS Web server 1 | 1 → < 1.1.9.23 | 1.1.9.23 |
| CODESYS SP Realtime NT 2 | 2 → < 2.3.7.30 | 2.3.7.30 |
| CODESYS PLCWinNT 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| CODESYS Runtime Toolkit 32 bit full 2 | 2 → < 2.4.7.57 | 2.4.7.57 |
| CODESYS Edge Gateway for Windows 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
Afficher les 4 autres branches Masquer les 4 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CODESYS HMI (SL) 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS OPC DA Server SL 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS PLCHandler 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
| CODESYS Gateway 3 | 3 → < 3.5.18.30 | 3.5.18.30 |
Références
- customers.codesys.com customers.codesys.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de CODESYS Development System
Les 8 CVE de CODESYS Development System →
CVE-2026-44469
The affected product extracts installation files to a temporary directory with incorrect default permissions during…
8.5
Élevée
CVE-2026-44468
The affected product creates a directory with insecure default permissions during administrative installation
8.5
Élevée
CVE-2025-41700
An unauthenticated attacker can trick a local user into executing arbitrary code by opening a deliberately manipulated…
7.8
Élevée
CVE-2023-3669
A missing Brute-Force protection in CODESYS Development System prior to 3.5.19.20 allows a local attacker to have…
3.3
Faible