CVE-2022-31805

—

CVSS 3.1

7.5 high

EPSS

<1%p60

Published

Jun 24, 2022 (Jun 24, 2022)

Modified

Jun 17, 2026

Description

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Vendors: codesys
Products: development system, edge gateway, gateway, hmi sl, opc server, plchandler, plcwinnt, runtime toolkit, sp realtime nt, web server
Weakness: CWE-523
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news2 stories

Two critical flaws affect CODESYS ICS Automation Software

Security AffairsJun 28, 06:38 UTC · Jun 28, 2022Vulnerability CVE-2022-31805 CVE-2022-31806 CVE-2022-31802+2 CVEs

Critical Security Flaws Identified in CODESYS ICS Automation Software

The Hacker NewsJun 27, 10:35 UTC · Jun 27, 2022Vulnerability CVE-2022-31805 CVE-2022-31806 CVE-2022-32136+4 CVEs