CVE-2022-31803

CVE-2022-31803 affects CODESYS Gateway Server V2. An unauthenticated attacker can exhaust TCP connections by sending crafted requests, preventing legitimate clients from establishing new connections (existing connections are left untouched). The vulnerability also involves insufficient password v...

CVE-2022-31804

The CVE-2022-31804 vulnerability affects the CODESYS Gateway Server V2 (prior to version 2.3.9.38). It does not verify that the size of a request is within expected limits, allowing an unauthenticated attacker to allocate memory arbitrarily, potentially causing the gateway to crash due to an out-...

CVE-2022-31802

CVE-2022-31802 affects CODESYS Gateway Server V2 prior to 2.3.9.38. The root cause is that only a portion of the specified password is compared to the real gateway password, enabling authentication by a short password fragment. Additional CVEs notes (and the linked advisories) describe related is...