CVE-2022-1794mediumCWE-256

CVE-2022-1794: medium-severity vulnerability in CODESYS OPC DA Server

Plaintext Storage of a password in CODESYS V3 OPC DA Server

Published · Updated

Follow this CVE+ Monitor CODESYS OPC DA Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.2%
The CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
CODESYS · CODESYS OPC DA Server