Vulnerabilities > CVE-2022-1989 - Information Exposure Through Discrepancy vulnerability in Codesys Visualization 4.0.0.0

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
network
low complexity
codesys
CWE-203

Summary

All CODESYS Visualization versions before V4.2.0.0 generate a login dialog vulnerable to information exposure allowing a remote, unauthenticated attacker to enumerate valid users.

Vulnerable Configurations

Part Description Count
Application
Codesys
1

Common Weakness Enumeration (CWE)