cve.bz

CVE-2022-1794

5.5 mediumEPSS 0.2%

Medium (5.5) in codesys opc da server. EPSS 0.2% chance of exploitation in the next 30 days.

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.

Severity

CVSS 3.1

5.5 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 11% of CVEs (scores of 2026-10-31)
CWEs
CWE-522, CWE-256
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON