CVE-2022-31804 HIGH

CVE-2022-31804: CODESYS Gateway server prone to denial of service attack due to excessive memory allocation

Vendor Codesys
Product CODESYS Gateway Server V2
Weakness CWE-789
Published June 24, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

The CODESYS Gateway Server V2 does not verifiy that the size of a request is within expected limits. An unauthenticated attacker may allocate an arbitrary amount of memory, which may lead to a crash of the Gateway due to an out-of-memory condition.

Key dates

02Disclosure timeline

June 24, 2022 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-8485 Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation CVE-2026-28253 Memory Allocation with Excessive Size Value vulnerability in Trane Tracer SC, Tracer SC+, and Tracer Concierge CVE-2018-25274 InfraRecorder 0.53 Denial of Service via txt File Import CVE-2026-41312 pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM CVE-2026-50734 Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All: Pre-authentication OpenWire memory-allocation DoS during wire format negotiation