CVE-2022-31805 Insecure transmission of credentials
Attackers can intercept unprotected passwords transmitted between CODESYS clients and servers, potentially leading to unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-31805?
CVE-2022-31805 is a high-severity vulnerability in CODESYS Development System, published on 24 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Weakness: CWE-523
Which versions are affected by CVE-2022-31805?
It affects 10 products.
Products include Codesys Development System, Codesys Edge Gateway, Codesys Gateway, Codesys Hmi Sl, Codesys Opc Server, Codesys Plchandler and 4 more.
How do I fix CVE-2022-31805?
No fix has been published for CVE-2022-31805 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-31805 being exploited?
There is no known exploitation of CVE-2022-31805 in the wild and no public exploit code.
Other vulnerabilities in CODESYS Development System
Sources
Also known as GHSA-q837-53gv-8r7r.