CVE-2022-31805: Codesys Development System

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

Affected products

• Codesys Development System: before 2.3.9.69 (fixed in 2.3.9.69)
• Codesys Edge Gateway: before 3.5.18.30 (fixed in 3.5.18.30)
• Codesys Gateway: before 2.3.9.38 (fixed in 2.3.9.38)
• Codesys HMI Sl: before 3.5.18.30 (fixed in 3.5.18.30)
• Codesys Opc Server: before 3.5.18.30 (fixed in 3.5.18.30)
• Codesys Plchandler: before 3.5.18.30 (fixed in 3.5.18.30)
• Codesys Plcwinnt: before 2.4.7.57 (fixed in 2.4.7.57)
• Codesys Runtime Toolkit: before 2.4.7.57 (fixed in 2.4.7.57)
• Codesys SP Realtime Nt: before 2.3.7.30 (fixed in 2.3.7.30)
• Codesys Web Server: before 1.1.9.23 (fixed in 1.1.9.23)

Published 2022-06-24. Last modified 2026-06-17.