CODESYS OPC DA Server SL vulnerabilities

2 known vulnerabilities in CODESYS OPC DA Server SL from Codesys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CODESYS Development System: Unprotected Transport of Credentials

  CVE-2022-31805Jun 24, 2022CodesysEPSS 1.06%

  In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

• 7.5 High severity

  CODESYS Control RTE (SL): Use of Insufficiently Random Values

  CVE-2022-22517Apr 7, 2022CodesysEPSS 1.52%

  An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.