PT-2022-14241 · 3S Smart Software Solutions · Codesys Visualization

Name of the Vulnerable Software and Affected Versions: CODESYS Visualization versions prior to V4.2.0.0 Description: The issue allows a remote, unauthenticated attacker to enumerate valid users due to information exposure in the login dialog. Recommendations: For versions prior to V4.2.0.0, updat...

CVE-2022-30792

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected...

CVE-2022-30791

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected...

CVE-2022-1794

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

CVE-2022-30792

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected...

CVE-2022-1794

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

Design/Logic Flaw

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected...

Design/Logic Flaw

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected...

Design/Logic Flaw

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

CVE-2022-30792

CVE-2022-30792 concerns CODESYS V3’s CmpChannelServer, where an uncontrolled resource consumption flaw allows an unauthorized attacker to block new communication channel connections. The impact is limited to availability (existing connections remain functional), with CVSS indicating high impact (...

CVE-2022-30792 CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected...

CVE-2022-30791

CODESYS V3 contains a vulnerability in the CmpBlkDrvTcp component where uncontrolled resource consumption can cause the system to block new TCP connections. Existing connections remain unaffected. This CVE-2022-30791 entry is corroborated by multiple sources (e.g., NVD), but the connected documen...

CVE-2022-30791 CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected...

CVE-2022-1794

CVE-2022-1794 affects the CODESYS OPC DA Server prior to v3.5.18.20, where PLC passwords are stored in plaintext in the configuration file and are visible to all authorized Windows users on the system. The vulnerability exposes credentials via local access to the host, as indicated by the CVSS ve...

CVE-2022-1794 Plaintext Storage of a password in CODESYS V3 OPC DA Server

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

3S-Smart Software Solutions CODESYS 资源管理错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A resource management error vulnerability exists in 3S-Smart Software Solutions CODESYS V3 CmpBlkDrvTcp, which can be exploited by an unauthorized attacker to prevent new TCP connections...

PT-2022-20317 · 3S Smart Software Solutions · Codesys V3

Name of the Vulnerable Software and Affected Versions: CODESYS V3 affected versions not specified Description: An uncontrolled resource consumption issue in the CmpChannelServer of CODESYS V3 allows an unauthorized attacker to block new communication channel connections. Existing connections are...

PT-2022-20316 · 3S Smart Software Solutions · Codesys V3

Name of the Vulnerable Software and Affected Versions: CODESYS V3 affected versions not specified Description: An issue in CmpBlkDrvTcp of CODESYS V3 allows an unauthorized attacker to block new TCP connections due to uncontrolled resource consumption. Existing connections are not affected...

3S-Smart Software Solutions CODESYS 资源管理错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions A resource management error vulnerability exists in 3S-Smart Software Solutions CODESYS V3 CmpBlkDrvTcp, which can be exploited by an unauthorized attacker to prevent new TCP connections...

3S-Smart Software Solutions CODESYS 安全漏洞

CODESYS is a controller development system from 3S-Smart Software Solutions, Germany. A security vulnerability exists in 3S-Smart Software Solutions CODESYS OPC DA Server versions prior to V3.5.18.20, which stems from the PLC storing passwords as plain text in its configuration file, which is...