238 results · Clear filters · Feed
-
High max 7.5
HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
CVE-2024-24781: If the above mentioned products are loaded with Wire speed (1Gbit/s or 100Mbit/s) the resources of the Ethernet-Controller are exhausted and it must be reset by the system automatically after load disappears. This leads to an interruption (DoS…
first Feb 13, 2024 -
High max 7.8
HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
Unquoted Windows search path vulnerability in the below mentioned Software for Windows might allow local users to gain privileges via a malicious .exe file.
first Jan 16, 2023 -
High max 7.8
Beckhoff: Local authentication bypass in IPC-Diagnostics package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, the authenticatio…
first Aug 27, 2024 -
High
Beckhoff: BK9000 couplers - Denial of service inhibits function
The coupler's function could be inhibited by an attack.
first Mar 10, 2020 -
High
Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
The affected products can act as OPC UA client or server and are vulnerable to two different kind of attacks via the OPC UA protocol. For both cases the attacker can send packets via the OPC UA protocol without the need to authenticate and 1. provoke a stack …
first Oct 21, 2024 -
High max 7.3
Beckhoff: Improper neutralization of input in IPC-Diagnostics-www package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, the user can bypa…
first Aug 27, 2024 -
High max 7.3
Beckhoff: Privilege Escalation through TwinCat System Tray (TcSysUI.exe)
The default installation path and its permissions for the TwinCAT runtime allow a local user to replace or modify executables other users of the same system might execute. The issue does not apply for installations underneath C:\Program Files.
first Nov 19, 2020 -
High max 8.6
ADS-TEC Industrial IT: Docker vulnerability affects multiple products
The affected products and versions present a vulnerability due to a vulnerable integrated software component the docker runc <= 1.1.11. In the worst-case scenario, the integrated Docker container environment could be compromised, potentially enabling the exec…
first Feb 19, 2024 -
High max 7.5VDE-2025-041 1 CVE
Weidmueller: ResMa is affected by a Vulnerability for ASP.NET AJAX
Weidmueller product ResMa is affected by ASP.NET AJAX vulnerability. Weidmueller has released a new firmware for the affected product to fix the vulnerability.
-
High max 7.1
PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service
Vulnerabilities have been discovered in the product, mainly caused by HTML injection and crosssite-scripting. The impact of the vulnerability on the affected device may result in an information disclosure and denial of service.
first Aug 13, 2024 -
High max 9.8
Weidmueller: Authentication Vulnerability in PROCON-WIN 5
Weidmüller product PROCON-WIN is affected by hard-coded credentials. Weidmüller has released a new version of the affected product to fix the vulnerability.
first Mar 5, 2025 -
High max 8.8
Weidmueller: Multiple vulnerabilities in Industrial WLAN devices
Multiple issues in Weidmueller Industrial WLAN devices have been found. Initial publication date: 2021-06-23 Update A publication date: 2021-07-02 Update A CVE-2021-33534 CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable com…
first Jun 23, 2021 -
High max 8.8
WAGO: Vulnerabilities in CODESYS Control
The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.
first Feb 4, 2025 -
High max 8.1
PHOENIX CONTACT: Multiple vulnerabilities in ENERGY AXC PU
Multiple vulnerabilities have been discovered in CODESYS Control V3 runtime system. For details regarding the single vulnerabilities please refer to the security advisories issued by CODESYS: - CODESYS Security Advisory 2022-02 - CODESYS Security Advisory 202…
first Mar 14, 2023 -
High max 8.1
PHOENIX CONTACT: Profinet SDK libexpat vulnerabilities
Two vulnerabilities have been discovered in the Expat XML parser library (aka libexpat). This open-source component is widely used in a lot of products worldwide. An attacker could cause a program to crash, use unexpected values or execute code by exploiting …
first Dec 13, 2022 -
High max 7.2
PHOENIX CONTACT: Advisory for TC ROUTER and CLOUD CLIENT
Two Vulnerabilities have been discovered in TC ROUTER 4000 series and CLOUD CLIENT 2000 series up to firmware version 4.5.7x.107. The web administration interface is vulnerable for authenticated admin users to path traversals, which could lead to arbitrary fi…
first Mar 7, 2023 -
High max 7.8
PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities
Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker needs to get access to an original bus configuration file (*.bcp) to …
first Nov 15, 2022 -
High max 7.5
PHOENIX CONTACT: Multiple products affected by possible infinite loop within OpenSSL library
FL MGUARD and TC MGUARD devices are affected by a possible infinite loop within a OpenSSL library method for parsing elliptic curve parameters. This method is used on parsing cryptographic certificates that contain elliptic curve public keys in compressed for…
first Apr 12, 2022 -
High max 7.5
Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerability has been discovered in the utilized component PROFINET IO Device by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerability on the affected device is that it can - no longer perform acyclic requests - may drop al…
first Nov 16, 2021 -
High max 7.8
CODESYS: Development System V2.3 affected by two vulnerabilities through corrupted project files
Local attackers can cause affected CODESYS Development System V2.3 installations to crash or execute code by opening malicious project files. The CODESYS Development System V2.3 is an IEC 61131-3 programming tool for the industrial controller and automation t…
first May 6, 2024 -
High max 8.6
Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver
Improper buffer restrictions in the webserver used in SIMA² Master Station software versions < V 2.6 may allow an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.
first Jun 15, 2022 -
High max 8.0
Wiesemann & Theis multiple products prone to web interface vulnerability
Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.
first Dec 13, 2022 -
High
Weidmueller: Remote I/O fieldbus couplers (IP20) affected by INFRA:HALT vulnerabilities
The Weidmueller Remote I/O (IP20) fieldbus couplers (u-remote) are affected by several vulnerabilities of the third-party TCP/IP Niche stack. An attacker may use crafted IP packets to cause a denial of service or breach of integrity of the affected products. …
first Oct 18, 2021 -
High max 9.8
WAGO: Web-Based Management Authentication Vulnerability in WAGO 750-36X and WAGO 750-8XX
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to read and write some special parameters without authentication. This vu…
first Aug 31, 2021 -
High max 7.5
WAGO: PLC families 750-88x and 750-352 prone to DoS attack, versions < FW10 (Update A)
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. Older firmware versions of the PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. A…
first Oct 27, 2020 -
High
WAGO: e!Cockpit cleartext communication and hardcoded key
The communication between e!Cockpit and the programmable logic controller is not encrypted. The broken cryptographic algorithm allows an attacker to decode the password for the e!Cockpit communication and with this to manipulate the application. The password …
first Mar 9, 2020 -
High max 8.6
SMA: Sunny Portal demo system privilege escalation
A security researcher discovered a privilege escalation vulnerability in the demo system area of the SMA Classic Portal, www.sunnyportal.com. Only systems of other users have been affected who unintendedly and illicitly had added their non-demo systems to the…
first May 13, 2025 -
High max 8.8
Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers
Improper file permission handling allows an authenticated low privileged user to gain root access.
first Jan 14, 2025 -
High max 7.5
Phoenix Contact: Multiple Vulnerabilities in PLCnext Engineer
Vulnerabilities in .NET and Visual Studio functions System.Text.Json, System.Formats.Asn1, OPCFoundation.NetStandard.Opc.Ua.Core allow an remote attacker to execute a Denial-of-Servce attack.
first Oct 8, 2024 -
High max 8.1
Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
first Sep 10, 2024 -
High max 8.8
PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
The user management of the FL SWITCH 2xxx family of devices implements access rights based on roles and permission groups. An unprivileged user logged in via the SSH CLI is assigned to the admin role independent of his configured access role enabling full acc…
first Jan 25, 2022 -
High max 7.5
PHOENIX CONTACT: Security Advisory for ILC1x1 Industrial controllers
Phoenix Contact Classic Line industrial controllers are developed and designed for the use in closed industrial networks. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packe…
first Jun 23, 2021 -
High max 8.8
Pepperl+Fuchs: Multiple vulnerabilites in Comtrol IO-Link Master
Several vulnerabilities exist within firmware versions up to and including v1.5.48.
first Jan 4, 2021 -
High max 8.8
MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.
first May 15, 2023 -
High max 7.5
Helmholz: Remote user enumeration in myREX24/myREX24-virtual
An issue was discovered in the myREX24 and myREX24-virtual software in all versions through V2.9.0.
first Dec 8, 2021 -
High max 7.3
Endress+Hauser: Multiple Devices affected by fdtContainer vulnerability
The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component. The fdtCONTAINER component exchanges binary data blobs with such a host a…
first Mar 1, 2021 -
High max 7.5
CODESYS: Vulnerability can cause a DoS on CODESYS OPC UA products
The CODESYS OPC UA stack of the CODESYS Control runtime system may incorrectly calculate the required buffer size for received requests/responses. This can lead to a crash of the CODESYS runtime system during the subsequent initialization of the receive buffe…
first Jun 4, 2024 -
High max 7.8
CODESYS: Vulnerability in multiple products through exposure of resource to wrong sphere
All legitimate local Microsoft Windows users can read or modify files that are located in the working directory of the affected CODESYS products, even if they are executed under a different user or in the system context.
first Jun 4, 2024 -
High max 7.5
Beckhoff: TwinCAT Denial-of-Service in Profinet driver
In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.
first Oct 9, 2019 -
High max 7.5
AUMA Riester: Buffer overflow in service telegram
Sending too much data in the service telegram of AUMA actuators leads to a buffer overflow in the actuator controls. Depending on the actuator, the service telegram is transmitted either via Bluetooth or RS232
first May 12, 2025