CVE-2022-31803CWE-400

CODESYS Gateway Server V2 prone to Denial of Service Attack

Medium · published June 24, 2022

CVSS v3.1
5.3
EPSS
1%
Percentile
66.2
In the wild
Unconfirmed
What it is

In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01135 · 66.2th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-06-24T07:46Z
EPSS history
Timeline
  • 24 JUN 07:46Z
    CODESYS Gateway Server V2 prone to Denial of Service Attack
    cvelistv5