Lucene search
PRIOn knowledge basePRION:CVE-2022-31802HistoryJun 24, 2022 - 8:15 a.m.
Design/Logic Flaw
2022-06-2408:15:00
PRIOn knowledge base
www.prio-n.com
6
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
Related
cvelist
cvelist
CVE-2022-31802 Partial string comparison in CODESYS gateway server
2022-06-09 00:00:00
nvd
nvd
CVE-2022-31802
2022-06-24 08:15:07
cve
cve
CVE-2022-31802
2022-06-24 08:15:07
thn
thn
Critical Security Flaws Identified in CODESYS ICS Automation Software
2022-06-27 10:35:00