CVE-2022-31805

High

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and…

CERTVDE·CWE-523·Published 2022-06-24

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

160 chars

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

NVDen

160 chars

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

En CODESYS Development System, varios componentes en diversos versiones transmiten las contraseñas para la comunicación entre clientes y servidores sin protección

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N
3.1	Primary	cve.org	7.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
3.1	Secondary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N