CVE:CVE-2022-31805
CNNVD:CNNVD-202206-2454
3s-smart Software Solutions CODESYS Development System是德国3s-smart Software Solutions公司的一套用于工业控制器和自动化技术领域的编程工具。
CODESYS Development System 多个版本的多个组件存在安全漏洞，该漏洞源于客户端和服务器之间的通信传输密码不受保护。
solution:Upgrade codesys development_system to a higher version than 2.3.9.69,and avoid the version (,2.3.9.69); Upgrade codesys edge_gateway to a higher version than 3.5.18.30,and avoid the version (,3.5.18.30); Upgrade codesys gateway to a higher version than 2.3.9.38,and avoid the version (,2.3.9.38); Upgrade codesys hmi_sl to a higher version than 3.5.18.30,and avoid the version (,3.5.18.30); Upgrade codesys opc_server to a higher version than 3.5.18.30,and avoid the version (,3.5.18.30); Upgrade codesys plchandler to a higher version than 3.5.18.30,and avoid the version (,3.5.18.30); Upgrade codesys plcwinnt to a higher version than 2.4.7.57,and avoid the version (,2.4.7.57); Upgrade codesys runtime_toolkit to a higher version than 2.4.7.57,and avoid the version (,2.4.7.57); Upgrade codesys sp_realtime_nt to a higher version than 2.3.7.30,and avoid the version (,2.3.7.30); Upgrade codesys web_server to a higher version than 1.1.9.23,and avoid the version (,1.1.9.23)