Summary
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed credentials.
It was found that users with no or low rights can access information from devices that should not be available to them.
An attacker can use this information to impersonate authorized users.
Details
Impact
An unauthenticated attacker can obtain sensitive information, potentially enabling authenticated device modification.
Mitigation
Implement access controls for physical interfaces to prevent unauthorized access.
Remediation
Update to the fixed firmware versions listed in this advisory. Rotate any credentials used on affected devices as they may have been compromised. Contact VEGA Support if emergency code rotation is necessary based on your risk assessment.
Fixed Version:
* Firmware 1.1.1 installed on VEGAPULS 6X Two-wire PROFINET, Modbus TCP, OPC UA (Ethernet-APL)
Vulnerabilities 1
-
High 7.5
VEGA: Privilege escalation through unsecured configuration interface in VEGAPULS devices
An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.
Revision history
-
#2.0.0
Removed Product group, corrected affected version range.
-
#1.0.2
Fixed version range name and vendor name
-
#1.0.1
Added fixed Version to document notes remediation
-
#1.0.0
Initial version
References
-
VEGA Grieshaber PSIRT
https://www.vega.com/en-us/company/legal-notice/information-on-cyber-security
-
CERT@VDE Security Advisories for VEGA Grieshaber
https://certvde.com/en/advisories/vendor/vega
-
VDE-2026-016: VEGA: Unsecured Configuration Interface Allows Unauthorized Access Leading to Privilege Escalation - HTML
https://certvde.com/en/advisories/VDE-2026-016