CVE-2022-31806 Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT
Attackers can access PLC controllers without authentication because password protection is disabled by default in CODESYS Runtime Toolkit and PLCWinNT.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-31806?
CVE-2022-31806 is a critical vulnerability in CODESYS PLCWinNT, published on 24 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
Weakness: CWE-1188
Which versions are affected by CVE-2022-31806?
It affects 2 products.
Products include Codesys Plcwinnt, Codesys Runtime Toolkit.
How do I fix CVE-2022-31806?
No fix has been published for CVE-2022-31806 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-31806 being exploited?
There is no known exploitation of CVE-2022-31806 in the wild and no public exploit code.
Other vulnerabilities in CODESYS PLCWinNT
- CVE-2022-32137 CODESYS Runtime System prone to heap based buffer overflow
- CVE-2022-32138 CODESYS runtime system prone to denial of service due to Unexpected Sign Extension
- CVE-2022-32143 CODESYS runtime system prone to directory acces
- CVE-2022-1965 CODESYS runtime system prone to file deletion due to improper error handling
- CVE-2022-32142 CODESYS runtime system prone to denial of service due to use of out of range pointer
Sources
Also known as GHSA-796c-7jw3-fwpp.