[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fecvRR9Ud3U0tgCmEGdQT7SnRwpWLTc0b9LMOBRyH91Q":3,"g5a-risk:CVE-2022-31805":158},{"success":4,"data":5,"meta":156},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":42,"epssPercentile":25,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":78,"references":79,"referencesCount":85,"weaknesses":86,"weaknessesCount":85,"isActivelyExploited":95,"cisaInfo":25,"otxData":25,"relatedBlogPosts":96,"seoMetadata":97,"configurations":122,"relatedVendorCves":154,"notableEvents":155},"CVE-2022-31805","What is CVE-2022-31805?","In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.","2022-06-24T08:15:07.59","2024-09-16T19:16:03.7",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"info@cert.vde.com","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Secondary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":29,"Type":17,"CVSSData":34,"BaseSeverity":37,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":20,"AccessComplexity":37,"Authentication":22,"ConfidentialityImpact":38,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":39,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.01021,[42,42,42,42,42,42,42],"High",[46,51,54,57,60,63,66,69,72,75],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"codesys","development_system","*","cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",{"vendor":47,"product":52,"version":49,"criteria":53,"vulnerable":4},"edge_gateway","cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*",{"vendor":47,"product":55,"version":49,"criteria":56,"vulnerable":4},"gateway","cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":49,"criteria":59,"vulnerable":4},"hmi_sl","cpe:2.3:a:codesys:hmi_sl:*:*:*:*:*:*:*:*",{"vendor":47,"product":61,"version":49,"criteria":62,"vulnerable":4},"opc_server","cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*",{"vendor":47,"product":64,"version":49,"criteria":65,"vulnerable":4},"plchandler","cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*",{"vendor":47,"product":67,"version":49,"criteria":68,"vulnerable":4},"plcwinnt","cpe:2.3:a:codesys:plcwinnt:*:*:*:*:*:*:*:*",{"vendor":47,"product":70,"version":49,"criteria":71,"vulnerable":4},"runtime_toolkit","cpe:2.3:a:codesys:runtime_toolkit:*:*:*:*:*:*:x86:*",{"vendor":47,"product":73,"version":49,"criteria":74,"vulnerable":4},"sp_realtime_nt","cpe:2.3:a:codesys:sp_realtime_nt:*:*:*:*:*:*:*:*",{"vendor":47,"product":76,"version":49,"criteria":77,"vulnerable":4},"web_server","cpe:2.3:a:codesys:web_server:*:*:*:*:*:*:*:*",10,[80],{"url":81,"source":82,"tags":83},"https:\u002F\u002Fcustomers.codesys.com\u002Findex.php?eID=dumpFile&t=f&f=17140&token=6aa2c5c4a8b83b8b09936fefed5b0b11f9d2cc6c&download=","Codesys",[84],"Vendor Advisory",1,[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-523","Unprotected Transport of Credentials","Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.","","Incomplete","Base","Simple",false,[],{"title":98,"metaDescription":99,"keywords":100,"canonicalUrl":101,"structuredData":102},"What is CVE-2022-31805? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-31805, a high severity cyber security vulnerability from 2022. In the CODESYS Development System multiple components in mu...","CVE-2022-31805, CVE-2022-31805 vulnerability, CVE-2022-31805 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, codesys security, development_system vulnerability, edge_gateway vulnerability, gateway vulnerability, hmi_sl vulnerability, opc_server vulnerability","\u002Fwhat-is\u002Fcve-2022-31805",{"@context":103,"@type":104,"headline":98,"description":99,"datePublished":9,"dateModified":10,"author":105,"publisher":109,"about":113,"mainEntityOfPage":117,"articleSection":120,"keywords":121},"https:\u002F\u002Fschema.org","TechArticle",{"@type":106,"name":107,"url":108},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":106,"name":107,"url":108,"logo":110},{"@type":111,"url":112},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":114,"name":6,"description":115,"additionalType":116},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":118,"@id":119},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-31805","Cybersecurity","CVE-2022-31805, CVE-2022-31805 vulnerability, CVE-2022-31805 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[123],{"Operator":25,"Negate":25,"Nodes":124},[125],{"Operator":126,"Negate":25,"CPEMatch":127},"OR",[128,131,134,137,139,141,143,146,148,151],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":129,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":130,"VersionEndIncluding":25},"85D06342-38A2-4E95-BE56-08D54271E41F","2.3.9.69",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":132,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":133,"VersionEndIncluding":25},"EC5C6832-F0B3-46DF-8047-22A2544D937C","3.5.18.30",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":135,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":136,"VersionEndIncluding":25},"6B9AE405-A0E5-48FF-9E8C-1A323D296445","2.3.9.38",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":138,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":133,"VersionEndIncluding":25},"F23A1B9F-97EE-4E4C-AAB9-511B4A3ED98C",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":140,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":133,"VersionEndIncluding":25},"46CDFB44-9702-4978-B577-9D07DF3D04B0",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":142,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":133,"VersionEndIncluding":25},"4932F620-43F8-4F3F-80AE-CD603BF05962",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":144,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":145,"VersionEndIncluding":25},"6887DEB0-5C13-4D7B-86E6-504D8CBB2A0D","2.4.7.57",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":147,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":145,"VersionEndIncluding":25},"5A605019-68F5-4C21-96BD-C300DECAA3D8",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":149,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":150,"VersionEndIncluding":25},"14F1D049-7DF2-453A-9D5A-7FCBCAD465E3","2.3.7.30",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":152,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":153,"VersionEndIncluding":25},"971AF379-F2B6-4791-B153-718517CA3E62","1.1.9.23",[],[],{"lastModified":10,"cacheTime":157,"version":35},1792392165091,{"score":159,"band":160,"action":161,"scoredAt":162},47,"Medium","Plan remediation","2026-10-16T06:54:53.468618+00:00"]