CVE-2022-31802

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*

Information

Published : 2022-06-24 01:15

Updated : 2022-07-01 06:34


NVD link : CVE-2022-31802

Mitre link : CVE-2022-31802


JSON object : View

CWE
CWE-187

Partial String Comparison

Advertisement

dedicated server usa

Products Affected

codesys

  • gateway