← Database

CVE-2022-31802

CRITICAL CVSS: 9.8 Published: 2022-06-24 Modified: 2026-06-17

Description

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.

Affected Platforms

Codesys Gateway

Weakness Type

CWE-187

References