238 results · Clear filters · Feed
-
High max 7.5
Helmholz: Use of a Broken or Risky Cryptographic Algorithm
Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.
-
High max 7.2VDE-2024-008 1 CVE
Wago: Vulnerability in WBM through Open VPN
A security vulnerability has been identified in the Web-Based Management (WBM) function when OpenVPN is enabled.
-
High max 7.5VDE-2026-013 1 CVE
Helmholz: Use of a Broken or Risky Cryptographic Algorithm
Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.
-
High max 9.8
Endress+Hauser: Multiple products affected by Qualcomm vulnerabilities
Multiple vulnerabilities in a Qualcomm component have been reported in a closed-source report. This component is an integral part of the radio chip found in several Endress+Hauser products.
first Dec 5, 2025 -
High max 7.9VDE-2025-098 1 CVE
Baade M2M-Products GmbH: ubusd heap buffer overflow vulnerability in OpenWRT prior to version 24.10.4
OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code i…
-
High max 8.8
Endress+Hauser: Multiple products prone to multiple vulnerabilities in e!Runtime and CODESYS V3 Runtime
Multiple Endress+Hauser devices are prone to vulnerabilities found in e!Runtime and the CODESYS V3 framework.
first Mar 31, 2026 -
High max 7.2VDE-2025-104 8 CVEs
Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx Firmware
Multiple vulnerabilities have been identified in the FL SWITCH 2xxx, FL SWITCH TSN 23xx and FL SWITCH 59xx firmware prior to version 3.53. One of these (CVE-2026-22317) enables an attacker to execute system commands as root user on the device. Five other vuln…
-
High max 7.3
CODESYS Installer - Possible Privilege Escalation
The CODESYS Installer is affected by a privilege escalation vulnerability. Due to a race condition, a local attacker with limited privileges can replace the verified downloaded setup before execution. Because the update process runs with administrator privile…
-
High max 9.8VDE-2025-096 4 CVEs
Weidmueller: Multiple vulnerabilities in Energy Meter 750-24 and Energy Meter 750-230
An unauthenticated remote attacker can exploit several vulnerabilities in Weidmueller devices Energy Meter 750-24 and Energy Meter 750-230 to ultimately gain full system access and remote code execution.
-
High max 7.8
Endress+Hauser: buffer overflow in glibc ld.so leading to privilege escalation
A vulnerability has been identified in WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser.
-
High max 8.2VDE-2026-007 1 CVE
TRUMPF: Multiple products affected by Wibu CodeMeter vulnerability
The TRUMPF product versions listed below include a Wibu CodeMeter component that is vulnerable to a privilege escalation vulnerability through the CodeMeter installer on Windows.
-
High max 7.5
ifm: Improper Access Control vulnerability
A vulnerability has been disclosed in PLC ifm AC4xxS that allows an attacker to trigger the safety state with the help of a specially crafted html request. This leads to a loss of availability.
first Jun 30, 2025 -
High max 7.5
CODESYS Control - Invalid type usage in visualization
A vulnerability in the CODESYS Control runtime system's CmpVisuServer component allows attackers to cause a denial-of-service (DoS) by sending special request to the CODESYS Web- or remote Target Visu. The issue is triggered by an internal read access using a…
first Dec 1, 2025 -
High max 9.8VDE-2026-004 4 CVEs
WAGO: Vulnerabilities in Managed Switch
Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication b…
-
High max 7.8
TRUMPF Laser GmbH: TruControl 2.14.0 to 3.14.0 affected by recent sudo vulnerability
TruControl laser control software from versions 2.14.0 to 3.14.0 use sudo versions affected by CVE-2021-3156. The affected sudo has a heap-based buffer overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…
first Mar 22, 2021 -
High max 9.4
Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service
**PIT User Authentication Service is part of the operating mode selection and access permission system PITmode.** The PIT User Authentication Service is affected by multiple vulnerabilities in included third-party components.
-
High max 8.8
Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager
The vulnerability CVE-2025-41726 (NN-2025-0074) allows an authenticated remote user to execute arbitrary commands on the device. This can be exploited over the web UI or via API. In one case the execution of the arbitrary command happens within a privileged p…
-
High max 9.8
WAGO: Vulnerabilities in WAGO Industrial-Managed Switches
Two remote stack buffer overflow vulnerabilities were discovered in WAGO industrial switches. These issues originate from unsafe input handling in custom HTTP request parsing functions within the lighttpd binary. The affected binary lacks modern security feat…
first Dec 10, 2025 -
High max 8.8VDE-2025-073 1 CVE
Phoenix Contact: Security Advisory for TC ROUTER and CLOUD CLIENT Industrial mobile network routers
A code injection vulnerability at the upload-config endpoint in the firmware of TC ROUTER and CLOUD CLIENT Industrial Mobile network routers has been discovered that can be exploited by an high privileged attacker.
-
High max 7.1
Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware
Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-…
first Dec 9, 2025 -
High max 7.8
Draeger: ICMHelper is vulnerable to a privilege escalation
A security vulnerability was identified in the ICMHelper service running on the system of an ICM installation. A low privileged local attacker could exploit this vulnerability to issue OS commands with the highest privileges.
first Aug 5, 2025 -
High max 8.8HBSA-2025-0001 1 CVE
BLE GATT Service Vulnerability in JBL Headphones
Due to improper BLE security configurations and lack of authentication on the GATT server of JBL LIVE PRO 2 TWS and JBL TUNE FLEX Headphones, unauthenticated users can read and write device control commands through the mobile app service.
-
High max 7.8
CODESYS Development System - Deserialization of Untrusted Data
A vulnerability has been discovered in the print engine of the CODESYS development system. If a CODESYS project file or archive file was crafted in a specific way, the CODESYS development system could execute arbitrary code when a user opens these files and c…
-
High max 7.4VDE-2025-086 1 CVE
Jumo: Predictable debug-interface password in variTRON series
A vulnerability was identified in the variTRON password generation algorithm of the debug-interface. The PRNG is initialized with the current Unix Timestamp, thus the resulting password is predictable. With the password root-access to the UART and ssh Interfa…
-
High max 8.8
Festo: Multiple products contain CoDe16 vulnerability
Several high severity vulnerabilities in CODESYS V3 affecting Festo products could lead to Remote Code Execution or Denial of Service.
first Jan 30, 2024 -
High max 7.5VDE-2025-062 3 CVEs
WAGO: Multiple Vulnerabilities in CODESYS components
Several WAGO firmwares installed on different devices are impacted by various CODESYS vulnerabilities. These affect the runtime, visualization, and OPC UA server.
-
High max 9.8
Sauter: Multiple vulnerabilities in SAUTER modulo 6
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.
first Oct 21, 2025 -
High max 7.5PPSA-2025-004 1 CVE
Pilz: Vulnerability affecting PASvisu Runtime
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.
-
High max 8.8
Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
A vulnerability in the firmware of CHARX SEC-3xxx charging controllers has been discovered.
first Oct 14, 2025 -
High max 7.5
CODESYS Control V3 - NULL pointer dereference
A vulnerability in the CODESYS Control runtime system's CmpDevice component allows unauthenticated attackers to cause a denial-of-service (DoS) via specially crafted communication requests. The issue is triggered by a NULL pointer dereference and also affects…
first Aug 4, 2025 -
High max 7.5VDE-2025-072 5 CVEs
Phoenix Contact: Security Advisory for QUINT4-UPS EIP
Multiple vulnerabilities were discovered in the firmware of QUINT4-UPS EIP devices that can be used by an unauthenticated remote attacker to perform Denial of Service attacks and to gather login credentials for the Webfrontend.
-
High
Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in multiple products
A vulnerability was reported in WIBU-SYSTEMS CodeMeter Runtime. WIBU-SYSTEMS CodeMeter Runtime is part of the installation packages of several Festo products.FluidDraw < 6.2c and CIROS <= 7.0.6 contain a vulnerable version of WIBU-SYSTEMS CodeMeter Runtime.
first Dec 13, 2022 -
High max 8.8
Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products according to the respective…
first Sep 5, 2023 -
High max 7.3
Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products
A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected produ…
first Oct 17, 2023 -
High max 7.5
WAGO: 750-8xx Controller Denial of Service
The 750-8xx controller are susceptible to a Denial-of-Service attack due to a flood of network packets. Please consult the original paper for details (link at the bottom of this advisory).
first Aug 17, 2018 -
High max 8.8
Welotec: Path Traversal in SmartEMS Upload Handling
A path traversal flaw in the SmartEMS upload handling allows authenticated users to direct upload data outside of the intended directory via the 'Upload-Key' header. In deployments where writable, code-interpreted paths are reachable, this may lead to remote …
first Sep 10, 2025 -
High max 7.8VDE-2025-075 1 CVE
Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
Beckhoff's TwinCAT 3 Engineering software is intented to craft automation projects consisting of a set of files which are stored locally as files underneath an individual folder or in a packed file. The TwinCAT 3 Engineering stores user settings and preferenc…
-
High max 8.2VDE-2025-064 1 CVE
Phoenix Contact: Products utilizing WIBU-SYSTEMS CodeMeter Runtime Windows Installer have a privilege escalation
A local privilege escalation vulnerability in Phoenix Contact products utilizing WIBU-SYSTEMS CodeMeter Runtime allows users to gain admin rights on freshly installed systems. The CodeMeter Control Center starts with elevated privileges and retains them until…
-
High max 7.5VDE-2025-048 1 CVE
WAGO: Escalation of Privileges in Coupler Firmware
A design flaw in the file system management exposes internal system partitions - intended to be hidden - during brief moments when they are mounted by the firmware. These partitions contain sensitive data such as firmware and certificates. Although access to …
-
High max 7.4VDE-2025-084 1 CVE
Bender Charge Controller Vulnerability - Unsecure Communication
Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the we…