199 results · Clear filters · Feed
-
Critical max 9.8
PHOENIX CONTACT: Multiple Vulnerabilities in PLCnext Firmware
A new LTS Firmware release fixes known vulnerabilities in used open-source libraries. In addition, the following improvements have been implemented: HMI - Hardening against DoS attacks. - Hardening against memory leak problems in case of network attacks. WBM …
first Feb 14, 2023 -
Critical
PHOENIX CONTACT: Advisory for multiple FL Switch GHS utilising VxWorks
CVS-2019-12255 Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is an IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow. The vulnerability affects a little-known feature of the TCP/IP pro…
first Feb 25, 2020 -
Critical max 9.8
Weidmueller: WIBU Vulnerability in multiple Products
Multiple Weidmueller products are affected by recent WIBU vulnerability.
first Nov 9, 2023 -
Critical max 9.8
Weidmueller: multiple vulnerabilities in various Industrial Ethernet managed switches
Multiple issues have been found. Please check the CVEs for details.
first Dec 5, 2019 -
Critical max 9.8
WAGO: Unauthenticated command execution via Web-based-management UPDATE A
The 'legal information' plugin of web-based-management contained a vulnerability which allowed execution of arbitrary commands with privileges of www user. UPDATE A 15.06.2023 : Removed PFC100 with FW23 as affected product and from solution PFC200 with FW23 i…
first May 15, 2023 -
Critical max 10.0
WAGO: Smart Script affected by Log4Shell Vulnerability
Apache Log4j is used for logging events in WAGO Smart Script in Version 4.2 and higher. Events logged by Log4j can contain JNDI references. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers …
first Jan 5, 2022 -
Critical max 9.1
WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3
Multiple vulnerabilities were reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLC's.
first May 20, 2021 -
Critical max 9.8
TRUMPF: Multiple products affected by log4net vulnerability
The versions of TRUMPF products stated below are including a version of log4net that's prone to XXE (External XML Entities) attacks under certain circumstances. This means, the log4net code can be tricked into loading externally hosted, potentially malicious …
first Apr 22, 2025 -
Critical max 9.8
Pilz: WIBU Vulnerabilitiy in multiple Products
Several Pilz products use the 3rd party component "CodeMeter Runtime" from WIBU-SYSTEM AG to manage software licenses. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software produc…
first Oct 12, 2023 -
Critical max 8.8
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
first Dec 9, 2024 -
Critical max 9.8
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
first Dec 9, 2024 -
Critical max 9.8
Phoenix Contact: MULTIPROG Engineering tool and ProConOS eCLR SDK prone to CWE-732
Increased Security attacks against OT infrastructure and research of Dragos makes it necessary to publish this advisory giving users hints according to basic security measures to support automation systems using existing devices based on ProConOS/ProConOS eCL…
first Dec 12, 2023 -
Critical max 10.0
Phoenix Contact: Multiple vulnerabilities in WP 6xxx Web panels
Multiple vulnerabilities allow an attacker to read arbitrary files, inject commands and bypass authentication or access control. Furthermore, hardcoded session and encryption keys as well as a missing firmware update signature and a service running with unnec…
first Aug 8, 2023 -
Critical max 9.6
Phoenix Contact: Multiple vulnerabilities in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices
Two vulnerabilities have been discovered in the firmware of TC ROUTER and TC CLOUD CLIENT devices. Update A, 2024-08-12 Added a summary text Added details to impact
first Aug 8, 2023 -
Critical max 7.8
Phoenix Contact: PLCnext Engineer Vulnerabilities in LibGit2Sharp/LibGit2
Several vulnerabilities have been discovered in the LibGit2Sharp or underlying LibGit2 library.This open-source component is widely used in a lot of products worldwide.The product is vulnerable to remote code execution, privilege escalation and tampering.PLCn…
first Aug 8, 2023 -
Critical max 9.8
PHOENIX CONTACT: Multiple Linux component vulnerabilities in PLCnext Firmware
UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62…
first Nov 10, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
ProConOS/ProConOS eCLR insufficiently verifies uploaded data.
first Jun 21, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerability in classic line industrial controllers
The affected devices insufficiently verify uploaded data.
first Jun 21, 2022 -
Critical
PHOENIX CONTACT: mGuard Device Manager affected by HTTP Request Smuggling of Apache Webserver
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling. For the mGuard Device Manager only the mdm Installer for Windows is affected.
first Apr 12, 2022 -
Critical max 9.8
PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release
PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities. Firmware components in version 2021.06 had …
first Apr 12, 2022 -
Critical max 7.3
PHOENIX CONTACT: Path Traversal in Library of PLCnext Technology Toolchain and FL Network Manager
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file write that may lead to code execution. The vulnerability …
first Mar 22, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerabilities in XML parser library Expat (libexpat)
Several vulnerabilities have been discovered in the Expat XML parser library (aka libexpat).This open-source component is widely used in a lot of products worldwide.A remote, anonymous attacker could use an integer overflow to execute arbitrary program code w…
first Mar 30, 2022 -
Critical max 8.2
PHOENIX CONTACT: BLUEMARK X1 / LED / CLED printers utilizing the Siemens Nucleus RTOS TCP/IP Stack
The TCP/IP stack and of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities. Nucleus NET is utilized by BLUEMARK X1 / LED / CLED. The abovementioned BLUEMARK printers are discontinued and only im…
first Jan 11, 2022 -
Critical max 9.1
WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 and WebVisualisation
Multiple vulnerabilities were reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLCs. All vulnerable PLCs are listed in chapter 'Affected Products'. https://www.codesys.com/security/security-reports.html
first Nov 16, 2021 -
Critical
PHOENIX CONTACT: mGuard device manager (mdm) multiple vulnerabilities in Java SE
Multiple security issues and vulnerabilities in Oracle Java SE possibly affecting mGuard device manager (mdm / FL MGUARD DM) 1.8.0 and older.
first Sep 7, 2017 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series - Stack-based Buffer Overflow in shared object file
An attacker may exploit a 'long cookie' related vulnerability to cause a buffer overflow that allows unauthorized access to the switches operating system files. The attacker can then insert executable code into the OS.
first May 16, 2018 -
Critical
PHOENIX CONTACT: Emalytics Controller ILC 2050 BI(L) allows unauthorised read and write access to the configuration file
Phoenix Contact Emalytics Controller ILC 2050 BI are developed and designed for the use in protected building automation networks.An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is …
first Feb 17, 2020 -
Critical
PHOENIX CONTACT: Niche Ethernet Stack for ILC1x0, ILC1x1 and AXC 1050 Industrial controllers and CHARX control DC
Third party Niche Ethernet stack has several vulnerabilities announced by the security researcher's community. Phoenix Contact Classic Line industrial controllers are developed and designed for the use in closed industrial networks. The communication protocol…
first Aug 4, 2021 -
Critical max 9.8
PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152
Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x
first Jun 4, 2019 -
Critical max 9.8
PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
An unauthenticated attacker could repeatedly send IPv6 packets, that include specially crafted packets, to a Windows machine which could enable remote code execution.
first Feb 25, 2025 -
Critical max 9.8
Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability
Critical vulnerabilities have been discovered in the utilized component log4net by Apache Software Foundation. UPDATE A: Remediation: added fixed VisuNet Products
first Oct 26, 2021 -
Critical max 9.8
Pepperl+Fuchs: Comtrol RocketLinx ICRL-M - Multiple Vulnerabilities
Several critical vulnerabilities within firmware.
first Mar 8, 2021 -
Critical max 9.8
Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally…
first Oct 21, 2024 -
Critical max 9.8
WAGO: Multiple Vulnerabilities in I/O-Check Service
Multiple vulnerabilities in the WAGO I/O-Check Service were reported.
first Jun 29, 2021 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 has a Stack-based Buffer Overflow
An attacker may insert a carefully crafted cookie into a GET menu_pxc.cgi or GET index.cgi request to cause a buffer overflow that can initiate a Denial of Service attack and execute arbitrary code.
first May 16, 2018 -
Critical max 8.8
PHOENIX CONTACT: Multiple Vulnerabilities in FL SWITCH 3xxx, 4xxx and 48xx
Multiple vulnerabilities for FL SWITCH have been identified in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx version 1.0 to 1.34.
first Jan 23, 2019 -
Critical
Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerability has been discovered in the utilized component 499ES EtherNet/IP Stack by Real Time Automation (RTA).
first Feb 15, 2021 -
Critical max 4.6
Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
Miele XGW 3000 is a ZigBee-TCP/IP gateway. The gateway connects Miele ZigBee-Appliances (called Miele@home) with local customer TCP/IP-Network and allows visualizing the appliance state on the web interface of the gateway, Miele SuperVision capable appliance,…
first May 20, 2019 -
Critical max 9.8
Helmholz: Privilege Escalation in shDialup (Update A)
Multiple Vulnerabilities in a software service of shDIALUP can lead to arbitrary code execution due to improper privilege management. Update A, 2022-03-28 Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability
first Mar 28, 2021 -
Critical
AUMA: SIMA Master Station affected by WRECK vulnerability
Forescout Research Labs, partnering with JSOF Research, disclosed NAME:WRECK, a set of Domain Name System (DNS) vulnerabilities that have the potential to cause either Denial of Service (DoS) or Remote Code Execution, allowing attackers to take targeted devic…
first Aug 7, 2023