Summary
The Lenze VPN client is vulnerable to a Remote Code Execution. The vulnerability would allow an attacker to perform a remote code execution on the computer running the client with elevated privileges.
Details
Remidiation
Update the Lenze VPN Client to the latest software Version (>= 1.4.7). For further instructions, see the vendor fix for this vulnerability.
Mitigation
As the cloud environment blocks older versions of the Lenze VPN Client, you must update the Lenze VPN Client. If you attempt to connect to the VPN using an older version, an error message will appear stating: "A newer version of the VPN client is required."
Impact
By exploiting this vulnerability, an attacker could completely compromise the system.
Vulnerabilities 1
-
Critical 9.6
IXON VPN Client CRLF Injection
Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. Configuration values accepted by the local service are written to a file later consumed by a privileged subprocess, wit…
Revision history
-
#1.0.0
initial revision
References
-
Lenze SE has a Product Security Incident Response Team (PSIRT) with its own communication channel. Contact us via https://www.lenze.com/ and the Service and Cyber Security tab.
https://www.lenze.com/en-de/services/cyber-security
-
CERT@VDE Security Advisories for Lenze
https://certvde.com/en/advisories/vendor/lenze/
-
VDE-2026-089: Lenze: VPN Client Remote Code Execution in combination with Lenze x500 IoT Gateway - HTML
https://certvde.com/en/advisories/VDE-2026-089