Approved changes feed: RSS · Atom

cpe:2.3:a:codesys:codesys_runtime_toolkit_32_bit_full:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodesys (4a5dbd6f-1914-5b18-8641-403ab498c199)
ProductCodesys Runtime Toolkit 32 Bit Full (7c06e663-bb23-5a0f-b7f2-65c0c8c5b3ad)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-31806 vulnerable 2026-06-08 05:44:42.363676 Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT
CRITICAL (9.8)
In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.
Published: 2022-06-24T07:46:17.024Z
Updated: 2024-09-17T03:27:59.221Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-31805 vulnerable 2026-06-08 05:44:42.347693 Insecure transmission of credentials
HIGH (7.5)
In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.
Published: 2022-06-24T07:46:15.076Z
Updated: 2024-09-16T18:55:26.939Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.