CVE-2022-31806

Name of the Vulnerable Software and Affected Versions CODESYS V2 PLCWinNT and Runtime Toolkit 32 versions prior to V2.4.7.57

Description The issue concerns password protection not being enabled by default. In cases where no password is set at the controller, there is no information or prompt to enable password protection at login.

Recommendations For versions prior to V2.4.7.57, update to version V2.4.7.57 or later to enable password protection by default. As a temporary workaround, consider manually enabling password protection for the controller to minimize the risk of exploitation.