PT-2022-20943 · 3S Smart Software Solutions · Codesys Gateway Server

Published 2022-06-24 · Updated 2022-07-01 · CVE-2022-31803

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions CODESYS Gateway Server V2 (affected versions not specified)

Description The issue is related to an insufficient check for the activity of TCP client connections, allowing an unauthenticated attacker to consume all available TCP connections. This prevents legitimate users or clients from establishing new connections to the server. However, existing connections remain intact.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-31803

Affected Products

Codesys Gateway Server

References · 5

• https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17141&token=17867e35cfd30c77ba0137f9a17b3a557a4b7b66&download= · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31803 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31803 · Security Note
• https://t.me/cvenotify/32098 · Telegram Post
• https://t.me/cvenotify/32480 · Telegram Post