Beveiligingsadvies

CVE-2022-31802

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-24 07:46:09
Laatst bijgewerkt 2024-09-17 00:32:18
Toegewezen door CERTVDE
CVSS-score 9.8
Status PUBLISHED

Beschrijving

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.