CVE-2022-31805CWE-523

Insecure transmission of credentials

High · published June 24, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
63.1
In the wild
Unconfirmed
What it is

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01021 · 63.1th percentile
Weakness
CWE-523 · Unprotected Transport of Credentials
Published
2022-06-24T07:46Z
EPSS history
Timeline
  • 24 JUN 07:46Z
    Insecure transmission of credentials
    cvelistv5