PLCWinNT vulnerabilities

2 known vulnerabilities in PLCWinNT from Codesys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CODESYS Development System: Unprotected Transport of Credentials

  CVE-2022-31805Jun 24, 2022CodesysEPSS 1.06%

  In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

• 8.1 High severity

  Runtime Toolkit: Improper Handling of Exceptional Conditions

  CVE-2022-1965Jun 24, 2022CodesysEPSS 1.09%

  Multiple products of CODESYS implement a improper error handling. A low privilege remote attacker may craft a request, which is not properly processed by the error handling. In consequence, the file referenced by the request could be deleted. User interaction