Skip to content
OpenAdvisories

Source

CERT@VDE

Source: https://certvde.com/en/advisories/

All Critical High Medium Low With exploited CVEs

7 results · Clear filters · Feed

  • Low max 3.7
    VDE-2026-009 1 CVE

    JUMO: Multiple products affected by nodejs vulnerability

    A vulnerability in the REST API of the JUMO device allows an attacker to trigger a denial‑of‑service (DoS) condition. Due to an incorrect implementation of the arrayLimit option in the Node.js qs module, limits for incoming request parameters are not properly…

    Jumo
  • Low max 7.5
    VDE-2025-091 1 CVE

    Murrelektronik: Cleartext Transmission of Sensitive Information in IMPACT67 Pro

    The embedded web interface of the MURRELEKTRONIK IMPACT67 Pro PN DIO8 IOL8 transmits login credentials over unencrypted HTTP using a GET request. The device does not offer HTTPS/TLS support, exposing user credentials to passive interception by any attacker on…

    Murrelektronik
  • Low max 4.3
    VDE-2025-047 1 CVE

    AUMA: Incorrect delivery status of the Bluetooth configuration

    For actuators with AC.2 controls and PROFOX actuators, a wrong configuration occurred for deliveries within the period from 01.01.2024 to 09.05.2025. Despite the ordered option "L90.00 = Bluetooth always deactivated", these actuators were delivered with an ac…

    Auma Riester
  • Low
    VDE-2020-014 1 CVE rev. 2

    Pepperl+Fuchs: Kr00k vulnerabilities in Broadcom Wi-Fi chipsets

    Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise tr…

    Pepperl+Fuchs
    first Mar 31, 2020
  • Low
    VDE-2021-012 3 CVEs rev. 2

    MB connect line: multiple products partially affected by DNSpooq

    Multiple issues have been identified in dnsmasq < 2.83

    MB connect line
    first Apr 26, 2021
  • Low max 2.7
    VDE-2023-046 1 CVE rev. 2

    WAGO: Multiple products vulnerable to local file inclusion

    An attacker with administrative privileges which can access sensitive files, can additionally access them in an unintended, undocumented way.

    WAGO
    first Oct 23, 2023
  • Low max 3.3
    VDE-2023-023 1 CVE

    CODESYS: Missing Brute-Force protection in CODESYS Development System

    The CODESYS Development System does not limit the number of attempts to guess the password within an import dialog.

    CODESYS