CVE-2022-31805 — In the CODESYS Development System multiple components in multiple versions trans

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

01What is this vulnerability?

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

02Affected products

Vendor	Product	Versions
CODESYS	CODESYS Development System	V2, V3
CODESYS	CODESYS Gateway Client	V2
CODESYS	CODESYS Gateway Server	V2
CODESYS	CODESYS Web server	V1
CODESYS	CODESYS SP Realtime NT	V2
CODESYS	CODESYS PLCWinNT	V2
CODESYS	CODESYS Runtime Toolkit 32 bit full	V2
CODESYS	CODESYS Edge Gateway for Windows	V3
CODESYS	CODESYS HMI (SL)	V3
CODESYS	CODESYS OPC DA Server SL	V3
CODESYS	CODESYS PLCHandler	V3
CODESYS	CODESYS Gateway	V3

03Active exploitation status

Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.

04Recommended remediation

• Patch to a fixed version listed in the vendor advisory (see references below).
• Mitigate with WAF rules, network egress filters, or feature flags where the patch is not yet available.
• Hunt historical logs for exploitation indicators — see Detection signatures below.

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

• Published: 2022-06-24T07:46:15.076Z
• Last modified: 2024-09-16T18:55:26.939Z

09References

• customers.codesys.com — https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a…