Total vulnerabilities in the database
In CODESYS Gateway Server V2 for versions prior to V2.3.9.38 only a part of the the specified password is been compared to the real CODESYS Gateway password. An attacker may perform authentication by specifying a small password that matches the corresponding part of the longer real CODESYS Gateway password.
| Software | From | Fixed in |
|---|---|---|
| codesys / gateway | 2.0 | 2.3.9.38 |