Skip to content
OpenAdvisories
Critical VDE-2026-038 2 CVEs

TURCK: Multiple Vulnerabilities in Managed Ethernet Switches

Published Jun 16, 2026 · Updated Jun 16, 2026 · Revision 2

Vendor: TURCK Product: TBEN-L4-SE-M2 Product: TBEN-L5-SE-M2 Product: TBEN-LL-SE-M2

Summary

Multiple vulnerabilities have been identified in the TBEN-Lx-SE-M2 firmware prior to version 2.1.2.0 in Managed Ethernet Switches.

Details

Impact
Availability, integrity or confidentiality of the TBEN-Lx-SE-M2 can be compromised by exploiting the vulnerabilities.

Remediation
TURCK recommends to update to the latest 2.1.2.0 Firmware Release which fixes these vulnerabilities.

Vulnerabilities 2

  • Critical 9.8
    CVE-2025-68615 EPSS 42%

    Net-SNMP snmptrapd crash

    net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overflow and the daemon to crash. This issue has been patched in versions 5.9.5 and …

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Azure Linux Alpine
  • High 8.8
    CVE-2026-5416

    Command Injection via name parameter

    Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.

    TURCK TBEN-L4-SE-M2 TBEN-LL-SE-M2 TBEN-L5-SE-M2

Revision history

  1. #1.0.1

    The Initial revision date was wrong

  2. #1.0.0

    Initial revision.

References