CVE-2022-31803
Last modified
CVE-2022-31803 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.. EPSS estimates a 1.03% chance of exploitation in the next 30 days.
Description
In CODESYS Gateway Server V2 an insufficient check for the activity of TCP client connections allows an unauthenticated attacker to consume all available TCP connections and prevent legitimate users or clients from establishing a new connection to the CODESYS Gateway Server V2. Existing connections are not affected and therefore remain intact.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Codesys | Gateway | >= 2.0, < 2.3.9.38 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-31803?
How severe is CVE-2022-31803?
How do I fix CVE-2022-31803?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-31798Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerab…6.1
- CVE-2022-31799Bottle before 0.12.20 mishandles errors during early request…9.8
- CVE-2022-3180The WPGateway Plugin for WordPress is vulnerable to privileg…9.8
- CVE-2022-31800An unauthenticated, remote attacker could upload malicious l…9.8
- CVE-2022-31801An unauthenticated, remote attacker could upload malicious l…9.8
- CVE-2022-31802In CODESYS Gateway Server V2 for versions prior to V2.3.9.38…9.8
- CVE-2022-31804The CODESYS Gateway Server V2 does not verifiy that the size…7.5
- CVE-2022-31805In the CODESYS Development System multiple components in mul…7.5
- CVE-2022-31806In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions pr…9.8
- CVE-2022-31807A vulnerability has been identified in Building X - Security…5.5
- CVE-2022-31808A vulnerability has been identified in SiPass integrated AC5…7.8
- CVE-2022-3181An Improper Input Validation vulnerability exists in Trihedr…7.5
Are you affected by CVE-2022-31803?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST