CVE-2022-31805
Estado: ModificadaAlta (7.5)—
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.02%
- Percentil entre todas las CVEs puntuadas: 62
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (10)
CWE
- CWE-523
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-31805",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
},
{
"type": "Secondary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "info@cert.vde.com",
"affectedData": [
{
"vendor": "CODESYS",
"product": "CODESYS Development System",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.3.9.69",
"versionType": "custom"
},
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Gateway Client",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.3.9.38",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Gateway Server",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.3.9.38",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Web server",
"versions": [
{
"status": "affected",
"version": "V1",
"lessThan": "V1.1.9.23",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS SP Realtime NT",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.3.7.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS PLCWinNT",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.4.7.57",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Runtime Toolkit 32 bit full",
"versions": [
{
"status": "affected",
"version": "V2",
"lessThan": "V2.4.7.57",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Edge Gateway for Windows",
"versions": [
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS HMI (SL)",
"versions": [
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS OPC DA Server SL",
"versions": [
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS PLCHandler",
"versions": [
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "CODESYS",
"product": "CODESYS Gateway",
"versions": [
{
"status": "affected",
"version": "V3",
"lessThan": "V3.5.18.30",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2022-06-24T08:15:07.590",
"references": [
{
"url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=",
"tags": [
"Vendor Advisory"
],
"source": "info@cert.vde.com"
},
{
"url": "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "info@cert.vde.com",
"description": [
{
"lang": "en",
"value": "CWE-523"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected."
},
{
"lang": "es",
"value": "En CODESYS Development System, varios componentes en diversos versiones transmiten las contraseñas para la comunicación entre clientes y servidores sin protección"
}
],
"lastModified": "2026-06-17T04:46:20.640",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85D06342-38A2-4E95-BE56-08D54271E41F",
"versionEndExcluding": "2.3.9.69"
},
{
"criteria": "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*",
"vulnerable": true,
"matchCriteriaId": "EC5C6832-F0B3-46DF-8047-22A2544D937C",
"versionEndExcluding": "3.5.18.30"
},
{
"criteria": "cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B9AE405-A0E5-48FF-9E8C-1A323D296445",
"versionEndExcluding": "2.3.9.38"
},
{
"criteria": "cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F23A1B9F-97EE-4E4C-AAB9-511B4A3ED98C",
"versionEndExcluding": "3.5.18.30"
},
{
"criteria": "cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46CDFB44-9702-4978-B577-9D07DF3D04B0",
"versionEndExcluding": "3.5.18.30"
},
{
"criteria": "cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4932F620-43F8-4F3F-80AE-CD603BF05962",
"versionEndExcluding": "3.5.18.30"
},
{
"criteria": "cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6887DEB0-5C13-4D7B-86E6-504D8CBB2A0D",
"versionEndExcluding": "2.4.7.57"
},
{
"criteria": "cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*",
"vulnerable": true,
"matchCriteriaId": "5A605019-68F5-4C21-96BD-C300DECAA3D8",
"versionEndExcluding": "2.4.7.57"
},
{
"criteria": "cpe:2.3:a:codesys:sp_realtime_nt:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14F1D049-7DF2-453A-9D5A-7FCBCAD465E3",
"versionEndExcluding": "2.3.7.30"
},
{
"criteria": "cpe:2.3:a:codesys:web_server:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "971AF379-F2B6-4791-B153-718517CA3E62",
"versionEndExcluding": "1.1.9.23"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "info@cert.vde.com"
}