Published: 24/06/2022 Updated: 09/05/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Vulnerable Product	Search on Vulmon	Subscribe to Product
codesys runtime toolkit
codesys plcwinnt
codesys plchandler
codesys opc server
codesys edge gateway
codesys hmi sl
codesys sp realtime nt
codesys web server
codesys gateway
codesys development system

Commonly existing PLC Supply Chain Threats: Multiple critical vulnerabilities in Codesys Runtime Abstract We conducted an in-depth research on CODESYS V2 runtime and PLCs using this kernel (ABB AC500 PLCs) We found 11 vulnerabilities in CODESYS V2 runtime; 2 of all accepted vulnerabilities graded as critical, 7 as high risk, and 2 as medium risk These vulnerabilities a

CWE-523 https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=https://nvd.nist.gov https://github.com/ic3sw0rd/Codesys_V2_Vulnerability

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-31805

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect