CVE-2022-31805

7.5 highEPSS 1.0%

High (7.5) in codesys. EPSS 1.0% chance of exploitation in the next 30 days.

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-523
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

codesys:development_system
codesys:edge_gateway
codesys:gateway
codesys:hmi_sl
codesys:opc_server
codesys:plchandler
codesys:plcwinnt
codesys:runtime_toolkit
codesys:sp_realtime_nt
codesys:web_server

References

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=

Check your stack JSON