Skip to content
Fencer Vulns
critical 9.8

CVE-2022-31806 json

Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT

published 2022-06-24 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-53195

cvss
9.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 69%
public exploits
0
none known

Summary

In CODESYS V2 PLCWinNT and Runtime Toolkit 32 in versions prior to V2.4.7.57 password protection is not enabled by default and there is no information or prompt to enable password protection at login in case no password is set at the controller.

Patch / fix

  • CODESYS CODESYS PLCWinNT V2.4.7.57
  • CODESYS CODESYS Runtime Toolkit 32 bit full V2.4.7.57

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-26-076-01 updated cvss 9.8

CODESYS in Festo Automation Suite

  • CODESYS Development System 3.0 Festo Automation Suite 2.8.0.137, Festo Automation Suite < 2.8.0.138 CODESYS Development System 3.5.16.10 Festo Automation Suite 2.8.0.137, Festo Automation Suite < 2.8.0.138
    affected: mitigation
  • Festo Automation Suite 2.8.0.138 CODESYS Development System 3.5.21.20
    fixed

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

cisa ICSA-25-329-05 updated cvss 9.8

Festo Compact Vision System, Control Block, Controller, and Operator Unit products

  • Festo -Q- -Q- Festo Software Compact Vision System SBO-Q- Festo Software Control block CPX-CEC Codesys V2 Festo Software Control block CPX-CEC-C1 Codesys V2 Festo Software Control block CPX-CEC-C1-V3 Codesys V3 Festo Software Control block CPX-CEC-M1 Codesys V2
    +27 more products
    Festo Software Control block CPX-CEC-M1-V3 Codesys V3 Festo Software Control block CPX-CEC-S1-V3 Codesys V3 Festo Software Control block CPX-CMXX Festo Software Controller CECC-D Festo Software Controller CECC-D-BA Festo Software Controller CECC-D-CS Festo Software Controller CECC-LK Festo Software Controller CECC-S Festo Software Controller CECC-X-M1 Festo Software Controller CECC-X-M1-MV Festo Software Controller CECC-X-M1-S1 Festo Software Controller CECX-X-C1 Festo Software Controller CECX-X-M1 Festo Software Controller CPX-E-CEC-C1 Festo Software Controller CPX-E-CEC-C1-EP Festo Software Controller CPX-E-CEC-C1-PN Festo Software Controller CPX-E-CEC-M1 Festo Software Controller CPX-E-CEC-M1-EP Festo Software Controller CPX-E-CEC-M1-PN Festo Software Controller FED-CEC Festo Software Operator unit CDPX-X-A-S-10 Festo Software Operator unit CDPX-X-A-W-4 Festo Software Operator unit CDPX-X-A-W-7 Festo Software Operator unit CDPX-X-A-W-13 Festo Software Operator unit CDPX-X-E1-W-7 Festo Software Operator unit CDPX-X-E1-W-10 Festo Software Operator unit CDPX-X-E1-W-15
    affected: mitigation “Festo has identified the following specific workarounds and mitigations users can apply to reduce risk:” certvde.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

1.23% chance of exploitation in the next 30 days, higher than 69% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

  • CODESYS CODESYS PLCWinNT
  • CODESYS CODESYS Runtime Toolkit 32 bit full

Classification

Weakness
  • CWE-1188 Initialization of a Resource with an Insecure Default

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.