Skip to content
OpenAdvisories

Source

CERT@VDE

Source: https://certvde.com/en/advisories/

All Critical High Medium Low With exploited CVEs

9 results · Clear filters · Feed

  • High max 8.8
    PPSA-2026-003 3 CVEs 2 exploited

    Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI

    The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.

    KUNBUS Pilz
  • High max 7.8
    VDE-2026-002 1 CVE 1 exploited

    Endress+Hauser: buffer overflow in glibc ld.so leading to privilege escalation

    A vulnerability has been identified in WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser.

    WAGO
  • High max 7.8
    VDE-2021-011 1 CVE 1 exploited rev. 4

    TRUMPF Laser GmbH: TruControl 2.14.0 to 3.14.0 affected by recent sudo vulnerability

    TruControl laser control software from versions 2.14.0 to 3.14.0 use sudo versions affected by CVE-2021-3156. The affected sudo has a heap-based buffer overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…

    TRUMPF
    first Mar 22, 2021
  • High max 7.8
    VDE-2022-009 1 CVE 1 exploited rev. 2

    WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe

    The Linux kernel starting from 5.8 has a flaw which can lead to privilege escalation for a local user. The kernel is used in several Versions of the FW of several WAGO products. All vulnerable PLCs are listed in chapter 'Affected Products'.

    WAGO
    first Apr 6, 2022
  • High max 8.8
    VDE-2023-048 1 CVE 1 exploited rev. 2

    Pilz: Multiple products prone to libwebp vulnerability

    Several Pilz products use the 3rd-party component 'libwebp' for decoding of images in WebP format. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software product. Depending on the …

    Pilz
    first Dec 5, 2023
  • High max 7.8
    VDE-2024-034 1 CVE 1 exploited rev. 3

    Multiple TRUMPF products prone to nftables server vulnerabilities

    TruControl laser control software from versions 3.50.0 to 4.00.0.B use Linux kernel versions affected by CVE-2024-1086. The affected kernel vulnerability could lead to local privilege escalation.

    TRUMPF Laser SE
    first Jun 25, 2024
  • High max 7.8
    VDE-2024-037 1 CVE 1 exploited

    Pepperl+Fuchs: Use after free vulnerability in Smart-Ex 02 and Smart-Ex 03

    A critical security vulnerability was discovered in the products, which is caused by the IPv6 stack in the Linux kernel.The impact of the vulnerability on the affected products may result in Elevation of privileges

    Pepperl+Fuchs
  • High max 8.8
    VDE-2023-059 2 CVEs 1 exploited

    Pilz: Electron Vulnerabilities in PASvisu and PMI v8xx

    The Builder and Viewer components of the product PASvisu are based on the 3rd-party-component Electron. Electron contains several other open-source components which are affected by vulnerabilities. The vulnerabilities may enable an attacker to gain full contr…

    Pilz
  • High max 8.8
    VDE-2021-034 1 CVE 1 exploited

    Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in multiple HMI Devices

    A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…