CVE-2022-1989 - CODESYS Visualization vulnerable to user enumeration

Back Back to CVE browser

MEDIUM

CODESYS Visualization vulnerable to user enumeration

Published Aug 23, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 0.85%

Description

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.

Affected products

Vendor Codesys Product CODESYS Visualization Default
n/a
- Version
  V3
  Status
  affected
  Constraints
  <V4.2.0.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Codesys

CODESYS Visualization

n/a

Version	Status	Constraints
V3	affected	<V4.2.0.0

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-203

CWE-204

References (2)

https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=
x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25254
Advisory

Link	Providers	Tags
https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=17142&token=a3696ab41fef800d2eaee8043d40d5fbe94277fd&download=		x_refsource_CONFIRMMitigationVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-25254		Advisory