199 results · Clear filters · Feed
-
Critical max 9.1
WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Version <= FW03
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters without authentication.
first Sep 30, 2020 -
Critical
Pilz: Multiple products prone to Niche Ethernet Stack vulnerabilities
Multiple products of PILZ utilise a third-party TCP/IP implementation - the "Niche Ethernet Stack". This TCP/IP stack contains multiple vulnerabilities which are therefore affecting the products listed above.
first Sep 20, 2021 -
Critical max 10.0
PHOENIX CONTACT: Multiple Vulnerabilities in MEVIEW3
Multiple vulnerabilities for MEVIEW3 have been identified in PHOENIX CONTACT MEVIEW3, versions below 3.14.25 and 3.15.18
first Mar 5, 2019 -
Critical
PHOENIX CONTACT: FL SWITCH 3xxx/4xxx/48xx series web-service authentication bypass
PHOENIX CONTACT FL SWITCH 3xxx series, FL SWITCH 4xxx series, and FL SWITCH 48xx series products running firmware version 1.0 to 1.32 allow unauthenticated users with network access to gain administrative privileges (CVE-2017-16743) and expose information to …
first Jan 10, 2018 -
Critical max 9.8
Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities
Critical vulnerabilities have been discovered in the utilized component TRECK TCP/IP Stack by Digi International Inc. For more information see advisory by Digi International Inc.: Digi International Security Notice - TRECK TCP/IP Stack "RIPPLE20" VU#257161 IC…
first Aug 16, 2021 -
Critical max 9.8
Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerabilities have been discovered in the product and in the utilized components jQuery by jQuery Team and TLS Version 1.0/1.1. The impact of the vulnerabilities on the affected device may result in - denial of service - remote code execution - cod…
first Oct 16, 2021 -
Critical max 9.1
Helmholz: Vulnerabilities in myREX24 V2/myREX24.virtual
The data24 service that is bundled with every installation of myREX24 V2/myREX24.virtual has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.
first Mar 18, 2025 -
Critical
Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities
For further Information please refer to WIBU Advisories directly at https://wibu.com/support/security-advisories.html and the aforementioned CVE-IDs.
first Oct 27, 2020 -
Critical max 5.6
Endress+Hauser: Multiple products affected by log4net vulnerability
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
first Jan 20, 2022 -
Critical max 9.8
TECSON/GOK: Improper Authentication and Access Control on multiple devices
A security researcher discovered that the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a user with limited access rights. Based on the lack of adequately implemented access-control rules, by …
first Jun 4, 2019 -
Critical max 10.0
WAGO: Command Injection Vulnerability in I/O-Check Service of multiple products
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets.
first Dec 17, 2020 -
Critical
WAGO: Cloud Connectivity Multiple Vulnerabilities
The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login wit…
first Mar 9, 2020 -
Critical
TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities
A number of TRUMPF CAD/CAM software tools use the CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to prevent normal operation of CodeMeter, resulting in a D…
first Oct 27, 2020 -
Critical max 9.8
Welotec: Two vulnerabilities in TK500v1 router series
Welotec has closed two vulnerabilities in the TK500v1 router series and advises to update the routers to firmware version r5542 or later. An exploitation of the vulnerabilities can allow an attacker to manipulate the device.
first Apr 9, 2024 -
Critical
Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities
WIBU-SYSTEMS report multiple vulnerabilities in their CodeMeter Runtime software. As part of the Weidmüller u-create studio installation the WIBU-SYSTEMS CodeMeter is installed by default. As the u-create studio installation bundle contains vulnerable version…
first Oct 12, 2020 -
Critical max 9.4
Weidmueller: Accidentally open network port in u-controls and IoT-Gateways
A network port intended only for device-internal usage is accidentally accessible via external network interfaces.
first May 4, 2021 -
Critical
WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro
Multiple vulnerabilities were reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (CODESYS 2.3) installations. All currently existing e!COCKPIT installation bundles and WAGO-I/O-Pro (CODESYS 2.3…
first Aug 31, 2021 -
Critical max 10.0
WAGO: Multiple Vulnerabilities in the Web-Based Management Interface
The Web-Based Management (WBM) of WAGOs industrial managed switches is typically used for administration, commissioning and updates. The reported vulnerabilities allow an attacker with access to the device and the Web-Based Management, to install malware, acc…
first May 5, 2021 -
Critical
WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT
Multiple vulnerabilties were reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT installation. All currently existing e!COCKPIT installation bundles contain vulnerable versions of WIBU-SYSTEMS Codemeter.
first Sep 9, 2020 -
Critical max 9.8
WAGO: PPPD in PFC100 and PFC200 Series is vulnerable to CVE-2020-8597
WAGO PLCs uses Linux as operating system and offers the ambitious user the opportunity to make their own modifications to expand the functionality of the PLC. For this reason the pppd daemon is also part of the operating system but it is not activated in the …
first Jun 10, 2020 -
Critical max 8.2
Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities
A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operat…
first Sep 10, 2020 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Command Injection
An attacker with permission to transfer configuration files to/from the switch or permission to upgrade firmware, is able to execute arbitrary OS shell commands. CGI applications config_transfer.cgi and software_update.cgi are prone to OS command injection th…
first May 16, 2018 -
Critical max 5.4
PHOENIX CONTACT: mGuard <8.8.3 products missing initialization of resource
For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource (CWE-909).
first Dec 17, 2020 -
Critical max 7.3
PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products
An undocumented password protected FTP access to the root directory exists in certain devices of the AXL F BK and IL BK product families (CWE-798).
first Jun 23, 2021 -
Critical max 9.8
Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED
For process data documentation purposes the laboratory washers, thermal disinfectors and washer-disinfectors can be integrated in a TCP/IP network by utilizing the affected communication module. The communication module is separate from the actual device cont…
first Jul 8, 2020 -
Critical max 9.8
MB connect line: Privilege escalation in mbDIALUP
Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management. Update A, 2021-11-24 corrected fixed version in solution from 3.9R0.4 to 3.9R0.5 Update B, 2022-03-28 Updat…
first Jul 22, 2021 -
Critical
Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow
Promass 83 devices utilizing 499ES EtherNet/IP (ENIP) Stack by Real Time Automation (RTA) are vulnerable to a stack-based buffer overflow. Update A, 2021-10-07: added credits changed title from "ENDRESS+HAUSER: Promass 83 with Ether/IP affected by DoS vulnera…
first Oct 4, 2021 -
Critical max 9.8
Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products
A vulnerability in the Wibu CodeMeter Runtime, which is part of the installation packages of several Festo products, was found. An attacker exploiting the vulnerability in WIBU CodeMeter Runtime in server mode could gain full access to the affected server via…
first Nov 28, 2023 -
Critical max 9.1VDE-2025-031 1 CVE
Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated TLS protocol versions
Com-Server firmware versions prior to 1.60 support the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to man-in-the-middle attacks and thereby compromise the confidentiality and integrity of data.
-
Critical max 9.8
Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
An unauthenticated attacker would be able to send crafted requests to cause the CODESYS Gateway Server V2 to allocate excessive memory or consume all available TCP client connections. Besides, passwords are insufficiently checked during login. All versions of…
-
Critical max 9.8
Wago: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro (UPDATE B)
Critical vulnerability has been discovered in the utilized component PROFINET IO Device by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerability on the affected device is that it can no longer perform acyclic requests may drop all es…
first Sep 25, 2023 -
Critical max 9.8VDE-2024-041 1 CVE
Endress+Hauser: Multiple products are vulnerable to code injection
Echo Curve Viewer is an utility used for offline visualization of previously recorded envelope curve data. Envelope curve records are exported from other Endress+Hauser software products like FieldCare as .curves files. Echo Curve Viewer opens .curves files a…
-
Critical max 9.8VDE-2024-011 13 CVEs
PHOENIX CONTACT: Multiple vulnerabilities in CHARX SEC charge controllers
Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. These vulnerabilities were discovered as part of a PWN2OWN competition initiated by Trend Micro Zero Day Initiative (ZDI).
-
Critical max 9.0VDE-2024-002 6 CVEs
Pilz: Multiple products affected by uC/HTTP vulnerability
The PITreader product family is using the 3rd -party-component uC/HTTP to implement the web server functionality. uC/HTTP is affected by multiple vulnerabilities. These vulnerabilities may enable an attacker to gain full control over the system.
-
Critical max 9.8VDE-2024-001 2 CVEs
TRUMPF: Multiple products contain WIBU CodeMeter vulnerabilities
The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60d) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilitie…
-
Critical max 9.8VDE-2024-006 3 CVEs
TRUMPF: Oseon contains vulnerable version of OpenSSL 1.1.x
Multiple vulnerabilities in the included versions of OpenSSL can lead to different problems, including crashes of the OpenSSL modules (leading to a Denial of Service) or leakage of plaintext. These underlying vulnerabilities can be fixed by installing a softw…
-
Critical max 9.8VDE-2024-007 2 CVEs
WAGO: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products
A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretation in Javascript, both used in CodeMeter Runtime affecting multiple products by WAGO. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (C…
-
Critical max 9.8VDE-2023-055 1 CVE
Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
Phoenix Contact classic line industrial controllers are developed and designed for the use in closed industrial networks. The controllers don't feature a function to check integrity and authenticity of the application (e.g.: logic files, executable logic, con…
-
Critical max 9.8VDE-2023-035 1 CVE
CODESYS: Multiple products affected by WIBU Codemeter vulnerability
Several CODESYS setups contain and install vulnerable versions of the WIBU CodeMeter Runtime.
-
Critical max 9.8VDE-2023-062 2 CVEs
Phoenix Contact: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products
A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretationin Javascript, both used in CodeMeter Runtime affecting multiple products by PHOENIX CONTACT.