CVE-2022-1794 Plaintext Storage of a password in CODESYS V3 OPC DA Server

The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system...

CVE-2022-1794

CVE-2022-1794 affects the CODESYS OPC DA Server prior to v3.5.18.20, where PLC passwords are stored in plaintext in the configuration file and are visible to all authorized Windows users on the system. The vulnerability exposes credentials via local access to the host, as indicated by the CVSS ve...