PT-2022-20946
CVE-2022-31806
·
تاريخ النشر
2022-06-24
·
تاريخ التحديث
2022-12-01
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CODESYS V2 PLCWinNT and Runtime Toolkit 32 versions prior to V2.4.7.57
Description
The issue concerns password protection not being enabled by default. In cases where no password is set at the controller, there is no information or prompt to enable password protection at login.
Recommendations
For versions prior to V2.4.7.57, update to version V2.4.7.57 or later to enable password protection by default. As a temporary workaround, consider manually enabling password protection for the controller to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾