Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: CODESYS Gateway Server V2 V2.3.9.38 Clear all filters
TI-2022-13695 CVE-2022-31803 · GHSA-9348-vpwc-ch78

CODESYS Gateway Server V2 prone to Denial of Service Attack

Priority LOW 26

In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from estab…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01163 Published 2022-06-24 Fixed in V2.3.9.38 CWE-400
TI-2022-13694 CVE-2022-31802 · GHSA-jp8v-m2cx-q392

Partial string comparison in CODESYS gateway server

Priority MEDIUM 45

In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01333 Published 2022-06-24 Fixed in V2.3.9.38 CWE-187