Description (CNA)
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CODESYS / CODESYS Development System | affected V2 before V2.3.9.69; affected V3 before V3.5.18.30 |
| CODESYS / CODESYS Gateway Client | affected V2 before V2.3.9.38 |
| CODESYS / CODESYS Gateway Server | affected V2 before V2.3.9.38 |
| CODESYS / CODESYS Web server | affected V1 before V1.1.9.23 |
| CODESYS / CODESYS SP Realtime NT | affected V2 before V2.3.7.30 |
| CODESYS / CODESYS PLCWinNT | affected V2 before V2.4.7.57 |
| CODESYS / CODESYS Runtime Toolkit 32 bit full | affected V2 before V2.4.7.57 |
| CODESYS / CODESYS Edge Gateway for Windows | affected V3 before V3.5.18.30 |
| CODESYS / CODESYS HMI (SL) | affected V3 before V3.5.18.30 |
| CODESYS / CODESYS OPC DA Server SL | affected V3 before V3.5.18.30 |
| CODESYS / CODESYS PLCHandler | affected V3 before V3.5.18.30 |
| CODESYS / CODESYS Gateway | affected V3 before V3.5.18.30 |
CWE
CWE-523
References
ADP enrichment
No English description supplied.