238 results · Clear filters · Feed
-
High max 8.3VDE-2024-021 2 CVEs
WAGO: Vulnerability in WAGO Navigator
The WAGO Navigator versions 1.0.1 and 1.0 are vulnerable due to the use of the WiX toolset version 3.11.2.
-
High max 7.8VDE-2024-019 5 CVEs
Phoenix Contact: Multiple vulnerabilities in the Firmware of CHARX SEC charge controllers
Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. Update: credis have been updated
-
High max 8.8VDE-2023-039 2 CVEs
Wago: Multiple vulnerabilities in web-based management of multiple products
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning, and updates. The option to change the configuration data via tools or the web-based-management enabled attackers to prepare cross-…
-
High max 8.8VDE-2023-049 1 CVE
Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
Frauscher Sensortechnik GmbH FDS102 for FAdC/FAdCi v2.10.1 is vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface by using an authenticated session cookie.
-
High max 8.8VDE-2023-066 1 CVE
CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products
UPDATE 29.02.2024: Removed "This version is planned for January 2024." from Solution as the updated version is released.On CODESYS Control runtimes running on Linux or QNX operating systems, successfully authenticated PLC programmers can utilize SysFile or CA…
-
High max 8.8
Pilz: Electron Vulnerabilities in PASvisu and PMI v8xx
The Builder and Viewer components of the product PASvisu are based on the 3rd-party-component Electron. Electron contains several other open-source components which are affected by vulnerabilities. The vulnerabilities may enable an attacker to gain full contr…
-
High max 7.5VDE-2023-044 1 CVE
Wago: Vulnerabilities in IEC61850 Server / Telecontrol
The Library WagoAppRTU which is part of the Wago Telecontrol Configurator is prone to improper input validation. By sending specifically crafted MMS packets an attacker can trigger a denial-of-service condition.
-
High max 8.1VDE-2024-042 1 CVE
MB connect line: Multiple products are vulnerable to regreSSHion
Several Red Lion Europe products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
-
High max 8.8VDE-2023-025 1 CVE
CODESYS: Control runtime system memory and integrity check vulnerabilities
The CODESYS Control V3 runtime system does not restrict the memory accesses of the PLC application code to the PLC application data and does not sufficiently check the integrity of the application code by default. This could be exploited by authenticated PLC …
-
High max 8.8VDE-2023-022 1 CVE
CODESYS: Missing integrity check in CODESYS Development System
The Notification Center of the CODESYS Development System receives messages without ensuring that the message was not modified during transmission. This finally enables MITMs code execution when the user clicks the "Learn More" button.
-
High max 7.3VDE-2023-021 1 CVE
CODESYS: Vulnerability in CODESYS Development System allows execution of binaries
The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.
-
High max 7.5VDE-2023-014 1 CVE
WAGO: Bluetooth LE vulnerability in WLAN-ETHERNET-Gateway
A vulnerability allows Bluetooth LE pairing traffic to be sniffed and used to bypass authentication for pairing.
-
High max 7.3VDE-2023-024 1 CVE
CODESYS: Vulnerability in CODESYS Development System and CODESYS Scripting
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by l…
-
High max 7.5VDE-2023-011 1 CVE
Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability
Frauscher Diagnostic System FDS001 for FAdC R1 and FAdCi R1 v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication.
-
High max 7.5VDE-2023-005 1 CVE
WAGO: Series 750-3x/-8x prone to MODBUS server DoS
An unauthenticated attacker with network access to port 502/TCP of the target device can cause a denial-of-service condition by sending multiple specially crafted packets. The MODBUS server does not properly release memory resources that were reserved for inc…
-
High max 8.8VDE-2023-008 2 CVEs
Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual
Two vulnerabilites have been discovered in myREX24 and myREX24.virtual in all versions through 2.13.3.
-
High max 8.8VDE-2023-004 1 CVE
Phoenix Contact: Directory Traversal Vulnerability in ENERGY AXC PU Web service
A Directory Traversal Vulnerability enables arbitrary file access in ENERGY AXC PU Web service.An authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload…
-
High max 9.8VDE-2022-033 2 CVEs
Pilz: PASvisu and PMI affected by multiple vulnerabilities
PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised t…
-
High max 8.1VDE-2022-052 1 CVE
Miele: Vulnerability in ease2pay cloud service used by appWash
Up until October 5th, 2022 the ease2pay API used by Miele's "AppWash" MobileApp was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small pa…
-
High max 7.5VDE-2022-042 1 CVE
WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot
The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is able to circumvent the MAC address filtering after a reboot of a device.
-
High max 7.5VDE-2022-047 1 CVE
WAGO: FTP-Server - Denial-of-Service
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of th…
-
High max 7.8VDE-2022-031 4 CVEs
WAGO: Multiple Products Series affected by multiple CODESYS vulnerabilities
Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.
-
High max 7.5VDE-2022-034 2 CVEs
TRUMPF: Products prone to Unified Automation vulnerabilities
A number of TRUMPF software tools use the OPC UA Server in C++ based OPC UA SDK by Unified Automation. The application contains several vulnerabilities, which enable an attacker to send malicious data to the application, resulting in a Denial-of-Service.
-
High max 9.8VDE-2021-004 1 CVE
Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write
A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may resu…
-
High max 8.8
Pepperl+Fuchs: Vulnerability in multiple VisuNet devices
Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: https://msrc.microsoft.com/update-guide/vulnerability/CVE- 2022-21990
first Apr 26, 2022 -
High max 7.3VDE-2022-015 1 CVE
Miele: Security vulnerability in Benchmark Programming Tool
The Miele Benchmark Programming Tool on a Microsoft Windows operating system, selects a folder by default upon installation that is writable for all users (C:\\MIELE_SERVICE). After the installation of the tool, users without administrative privileges are abl…
-
High max 7.5VDE-2021-046 2 CVEs
PHOENIX CONTACT: XSS and memory-leak in FL MGUARD 1102/1105
Cross-site scripting in web-based management and memory leak in the remote logging function of FL MGUARD 1102 and FL MGUARD 1105. CVE-2021-34582: The file upload functionality in the web-based management is affected by a stored cross-site scripting vulnerabil…
-
High max 8.8
Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in multiple HMI Devices
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…
-
High max 8.6VDE-2021-018 4 CVEs
Pepperl+Fuchs: Multiple vulnerabilites in ICE1 Ethernet IO Modules
Critical vulnerability has been discovered in the utilized components rcX, mbedTLS, PROFINET IO Device and EtherNet/IP Core by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerabilities on the affected device is that it can result in: *…
-
High max 7.3VDE-2020-048 1 CVE
M&M Software (WAGO): Deserialisation of untrusted data in fdtContainer
The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component. The fdtCONTAINER component exchanges binary data blobs with such a host a…
-
HighVDE-2020-013 1 CVE
PHOENIX CONTACT: Local Privilege Escalation in Portico Remote desktop control software
If the software runs as a service, a user with limited access can gain administrator privileges by starting a shell with administrator rights from the Import / Export configuration dialog.
-
HighVDE-2020-007 1 CVE
WAGO: Web-Based Management Denial of Service
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for commissioning and update. The controller is an embedded device which has limited resources. The vulnerability described here takes advantage of this fact.With sp…
-
HighVDE-2019-005 9 CVEs
Endress+Hauser: WIFI enabled products utilising WPA2
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
-
HighVDE-2019-004 5 CVEs
Pepperl+Fuchs: ecom Mobile Devices prone to BlueBorne Attack
A collection of Bluetooth attack vectors were discovered and related vulnerabilities known as "BlueBorne" were disclosed. These vulnerabilities collectively endanger amongst others Windows, Linux and mobile operating systems like Android or IOS. An unauthenti…
-
High
Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
first Dec 11, 2017 -
HighVDE-2018-015 1 CVE
Phoenix Contact: AXL F BK PN Denial of Service Vulnerability
Incorrect handling request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. Authentication of the request is not required.
-
High max 7.5VDE-2018-012 1 CVE
PHOENIX CONTACT: ILC 1x1 ETH Denial of Service
The processing program of the IEC 61131 program can be slowed down or stopped completely by creating a large amount of network traffic that needs to be handled by the ILC.
-
HighVDE-2018-008 1 CVE
Pepperl+Fuchs: Remote Code Execution Vulnerability in HMI Devices
A remote code execution vulnerability in the Microsoft's Credential Security Support Provider protocol (CredSSP) was identified by security researchers. If exploited successfully, it is possible to relay user credentials for arbitrary code execution on the ta…