← CVE Intelligence

CVE-2022-31802

Partial string comparison in CODESYS gateway server PUBLISHED

Description (CNA)

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Gateway Server V2affected V2 before V2.3.9.38

CWE

CWE-187

References

ADP enrichment

CVE

No English description supplied.