238 results · Clear filters · Feed
-
High max 8.5VDE-2026-087 3 CVEs
Beckhoff: Exposed IOCTLs with insufficient access control in TcRouter.sys
The vulnerabilities allow local low privileged users or processes to gain full system access on the affected devices through exposed IOCTL function calls.
-
High max 7.8
WAGO: Multiple PLCs and Communication Components are Affected by multiple Vulnerabilities leading to RCE
Multiple WAGO devices are affected by CODESYS Control vulnerabilities. The affected WAGO firmware versions are <4.10.0 (FW32) and <4.10.0 (70).
-
High max 8.6VDE-2026-098 5 CVEs
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation for SW Tools
This advisory addresses multiple security vulnerabilities in Phoenix Contact products using the software CodeMeter Runtime like licensed desktop software tools. These security vulnerabilities only may occur with CodeMeter Runtime 8.x versions <V8.41a and Code…
-
High max 8.6VDE-2026-084 4 CVEs
Phoenix Contact: CodeMeter Runtime Security Vulnerabilities in License Validation in the PLCnext Firmware
This advisory addresses security vulnerabilities in Phoenix Contact products with an integrated CodeMeter Runtime, like PLCnext devices and Virtual Controls. These security vulnerabilities only may occur with versions <8.41a of the integrated software CodeMet…
-
High max 8.4VDE-2026-121 3 CVEs
Phoenix Contact: GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities in PLCnext Engineer programming software
GSDX SignatureValue verification, signed plug-in validation bypass and path traversal vulnerabilities have been identified in PLCnext Engineer prior to version 2026.6. The effects of these vulnerabilities may result in a complete loss of confidentiality, inte…
-
High max 7.2VDE-2026-119 6 CVEs
Welotec: Multiple vulnerabilities in TK routers
Multiple vulnerabilities in the web-based management functions of the affected Welotec routers, including VPN-related functions, may allow a remote attacker with high privileges to inject commands or trigger a buffer overflow. Successful exploitation may resu…
-
High max 7.5
VEGA: Unsecured Configuration Interface Allows Unauthorized Access Leading to Privilege Escalation
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first Apr 22, 2026 -
High max 7.5
CODESYS Gateway Client - Uncontrolled Memory Allocation
The CODESYS Gateway Client (CmpGwClient) is used by various CODESYS products to establish PLC communication via the CODESYS Gateway. Due to missing limits on memory allocations derived from a size field in a gateway response, a malicious gateway can cause exc…
first Sep 30, 2026 -
High max 8.1
CODESYS Control Runtime - Improper Synchronization in Monitoring
The monitoring functionality of affected CODESYS Control runtime systems processes read and write requests to PLC application data sent by the CODESYS Development System and other clients such as HMIs. Due to improper synchronization in the CmpMonitor2 compon…
first Sep 30, 2026 -
High max 6.9PPSA-2026-005 3 CVEs
Pilz: Vulnerabilities in 'PiCtory' and 'RevPiPyLoad' for Industrial PC IndustrialPI
The 'Pictory' web config tool, prior to 2.17.0, has a Cross-Site Request Forgery (CSRF) vulnerability, which makes it vulnerable to session takeover. The 'revpipyload' package, prior to version 0.11.1, has a vulnerability in the file management functionality …
-
High max 7.3PPSA-2026-004 3 CVEs
Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
-
High max 8.6VDE-2026-091 5 CVEs
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerabilities
The TRUMPF product versions listed below include a Wibu CodeMeter Runtime version that contains several vulnerabilities, e.g. potentially allowing privilege escalation.
-
High max 9.8VDE-2026-078 8 CVEs
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-…
-
High max 8.8
Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
-
High max 8.8VDE-2026-076 15 CVEs
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bund…
-
High max 9.8VDE-2026-085 1 CVE
Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.
-
High max 8.8VDE-2026-081 15 CVEs
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities
Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-202…
-
High max 7.8VDE-2026-077 1 CVE
Lenze: Incorrect signature validation in the enable SSH routine
The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which cou…
-
High max 7.5
MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.
first May 27, 2026 -
High max 7.5
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
first May 21, 2026 -
High max 7.5VDE-2026-045 1 CVE
Endress+Hauser: Multiple products affected by SopasET interface vulnerability
A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.
-
High max 8.0VDE-2026-066 10 CVEs
METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
-
High max 8.7
CODESYS EtherNetIP - Improper timeout handling
CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the …
-
High max 7.5
Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
Motherbox 3 with firmware 1.44 to 1.48 allows an unauthenticated remote attacker read-only access to the internal DB with measurement values from other W&T sensor devices.
first Aug 10, 2025 -
High max 7.2
Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual
There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
-
High max 7.2VDE-2026-068 1 CVE
MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24
There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
-
High max 7.5
CODESYS Control V3 - Externally-controlled format string in Auditlog
The CODESYS Control runtime system's CmpAuditLog component allows potentially unauthenticated remote attackers to control the format string of processed log messages. Due to the internal processing logic, the impact is limited to a crash of the CODESYS Contro…
first Mar 24, 2026 -
High max 7.5
CODESYS Control - Out-of-bounds Write
The CmpWebServer component in the CODESYS Control Runtime allows users to create browser-based visualizations for monitoring and controlling industrial processes. Due to improper bounds checking, a specially crafted HTTP request from an unauthenticated remote…
first May 26, 2026 -
High max 8.1
CODESYS Control - Incorrect Authorization
The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups including the visualization administrators group, which is intended solely to manage visualization users. Due to insufficient authorization checks an authen…
first May 26, 2026 -
High max 8.8
CODESYS Control V3 - Untrusted boot application
The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups. While only the privileged Administrators and Developer groups are intended to load or debug applications on the controller, users in the restricted Service…
first Mar 24, 2026 -
High max 7.5
Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
VDE-2026-060: A unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers has been discovered.
-
High max 8.4VDE-2026-054 2 CVEs
MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
-
High max 8.4VDE-2026-059 2 CVEs
Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.
-
High max 8.8VDE-2026-050 2 CVEs
Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and Configuration Files
This advisory addresses security issues in PLCnext firmware versions prior to 2026.0.3 that are related to APP handling and the processing of configuration files. The identified vulnerabilities affect APP installation authenticity as well as the handling of c…
-
High max 7.6VDE-2026-053 2 CVEs
METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities
Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.
-
High max 7.8ADVISORY2026-09_VDE-2026-055 2 CVEs
CODESYS Development System - Incorrect Default Permissions
Two local privilege escalation vulnerabilities were identified in the CODESYS Development System. Specifically, the PackageManager and the IPM create temporary directories with insecure default permissions when executed with administrative privileges. This al…
-
High max 6.5
Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure
first Apr 10, 2024 -
High max 8.3VDE-2026-005 3 CVEs
ifm: Multiple Vulnerabilities in CR3171
The Firmware installed on the CR3171 is impacted by various CODESYS vulnerabilities.
-
High max 7.5PPSA-2026-002 1 CVE
Pilz: Vulnerability affecting PASvisu Runtime
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by malicious web requests.
-
High max 8.8VDE-2026-023 2 CVEs
Phoenix Contact: Several products are affected by vulnerabilities found in OpenSSL
Attacks are possible when installing key files and digitally signed objects. These attacks can only be carried out if these files are uploaded and installed by a logged-in user with high privileges.