Design/Logic Flaw

2022-12-2619:15:00

PRIOn knowledge base

www.prio-n.com

codesys

weak hashing

local attacker

full control

nvd

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.5%

JSON

In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.

CPENameOperatorVersion
pmcge3.0.0
pmclt3.5.17

CPE	Name	Operator	Version
	pmc	ge	3.0.0
	pmc	lt	3.5.17

References

cert.vde.com/en/advisories/VDE-2021-061/

cert.vde.com/en/advisories/VDE-2022-022/

cert.vde.com/en/advisories/VDE-2022-031/

customers.codesys.com/index.php?eID=dumpFile&t=f&f=12943&token=d097958a67ba382de688916f77e3013c0802fade&download=