← Back to CVE List

CVE-2022-31802

Published: 2022-06-24T08:15Z
Last Modified: 2024-11-21T07:05Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt