96 results · Clear filters · Feed
-
Medium max 5.4VDE-2026-138 1 CVE
Welotec: Trust in Compromised Intermediate Certificates in egOS
The egOS system trust store uses certificate data from the Mozilla NSS root store. The trust store contains eMudhra emSign root certificates associated with eight compromised intermediate certificate authority keys. An unauthenticated attacker who possesses o…
-
Medium max 9.2
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT affected by PHP vulnerability
The Weidmueller security routers IE-SR-4TX and IE-SR-4GT in firmware releases prior to 2.3.4 bundle a PHP version that is affected by CVE-2026-109618. In the configuration used by the products, the vulnerability can allow an attacker to cause a denial of serv…
-
Medium max 9.2
ads-tec Industrial IT: PHP Vulnerability in ADS-TEC IRF Products and Web Terminals
The ADS-TEC IRF1000 and IRF3000 products in firmware releases prior to 2.3.3, the IRF2000 products in firmware releases prior to 5.0.12 and the ADS-TEC web terminals DVG-SHW9019, DVG-SHW9024, DVG-MEW9016, DVG-MEW9019, DVG-MEW9024, DVG-OPW9016, DVG-OPW9019 and…
-
Medium max 4.3VDE-2026-109 1 CVE
Bender Customer&Partner Platform Vulnerability - Privilege Escalation
Bender is publishing this advisory to inform customers about a security vulnerability in the Customer&Partner platform. The issue allows any account to view the roles of other users. Bender has analyzed the weakness and determined that user information and us…
-
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS two- and four-wire products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS Bluetooth products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Medium max 7.5
VEGA: Missing Authentication for critical function in VEGAPULS Air products
Vulnerable components expose sensitive information to unauthorized actors through an unsecured configuration interface. Vulnerable firmware releases contain an unsecured configuration interface that allows retrieval of sensitive information such as hashed cre…
first May 4, 2026 -
Medium max 5.3
Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches
An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The…
first Aug 24, 2026 -
Medium max 6.5
WAGO: Year 2038 problem
The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetting…
first Apr 15, 2025 -
Medium max 6.7VDE-2026-065 1 CVE
Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library
A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.
-
Medium max 6.5
CODESYS PROFINET Controller - Out-of-bounds Write
CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and execute…
-
Medium max 7.5VDE-2026-063 1 CVE
Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
Multiple Murrelektronik network-enabled devices respond to SNMPv2c 'GETBULK' requests with disproportionately large response packets when the requesting party specifies a large max-repetitions value. This response amplification allows the affected devices to …
-
Medium max 5.9VDE-2026-062 1 CVE
Several Murrelektronik Devices use Default SNMP Community Names
Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network acces…
-
Medium
JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices
Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.
first Jun 23, 2026 -
Medium max 6.9
CODESYS Visualization - Insufficiently Protected Credentials
A vulnerability in the CODESYS Visualization login dialog has been identified. During logins within the CODESYS Visualization, authentication data may not be sufficiently isolated when multiple users perform login operations concurrently. As a result, an auth…
-
Medium max 8.2
CODESYS Modbus TCP Server - Improper resource management
CODESYS Modbus is an add‑on for the CODESYS Development System that provides a fully integrated Modbus protocol stack along with diagnostic capabilities. A flaw in the CODESYS Modbus TCP Server protocol stack library results in a vulnerability. When a Modbus …
-
Medium max 8.8VDE-2026-029 1 CVE
METTLER TOLEDO: OpenSSL vulnerability in MX and MR balances
MX/MR firmware V2.0.0 or earlier is affected by the OpenSSL vulnerability CVE-2025-15467.
-
Medium max 5.9
Phoenix Contact: Unbounded growth of the session cache in TCP encapsulation service in FL MGUARD 2xxx and 4xxx firmware
The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.
first Feb 10, 2026 -
Medium max 7.4
Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions
A privilege escalation vulnerability has been identified in Endress+Hauser's Proline 10 devices. This flaw allows an authenticated user with Operator-level access to elevate their privileges and gain Maintenance-level access, potentially enabling unauthorized…
first Sep 2, 2025 -
MediumHBSA-2025-0003 0 CVEs
JBL: DoS vulnerability in Flip 4
The Bluetooth Classic implementation on JBL Flip 4 devices with firmware version prior to 4.1.0 does not properly handle malformed LMP messages and causes the entire device to crash. Any attacker in radio range can exploit this vulnerability.
-
Medium max 5.9
CODESYS Control - Linux/QNX SysSocket flaw
A vulnerability has been identified in the CODESYS Control runtime system, which includes an abstraction layer designed to ensure compatibility across different operating systems. This layer is used both by affected CODESYS products and by applications runnin…
first Dec 1, 2025 -
Medium max 5.5
Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server
An optional package of the TwinCAT 3 XAR installs the TwinCAT 3 HMI Server on a device. It provides a server configuration page which can be accessed by administrative users only. When such an administrator accesses the server configuration page it is possibl…
first Jan 26, 2026 -
Medium max 6.5HBSA-2025-0002 1 CVE
BLE ICM Vulnerability in JBL Headphones
The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet.
-
Medium max 7.5VDE-2025-094 1 CVE
Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
A vulnerability in the devices UMG 96-PA and UMG 96-PA-MID+ enables an unauthenticated remote attacker to cause the device to become unavailable.
-
Medium max 6.5
WAGO: Vulnerabilities in WAGO Device Manager
Vulnerabilities have been discovered in the WAGO Device Manager that allow any origin to access the server and set header values, as well as an endpoint that permits read access to the file system. The WAGO Device Manager is a software for configuring and par…
first Jun 16, 2025 -
Medium max 6.5
Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance
A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.
first Aug 29, 2023 -
Medium max 5.6
PHOENIX CONTACT: addressing Meltdown and Spectre vulnerabilities
Several CPUs manufactured by Intel, AMD or based on ARM technology may leak information due to their internal operation if attacked by specifically written software executed on the affected systems. The information in this advisory is based on the statements …
first Mar 23, 2018 -
Medium max 6.5VDE-2025-083 1 CVE
WAGO: Vulnerability in hardware switch circuit
The vulnerability in the Ethernet switch circuit is caused by a PullUp resistor at the reset input, leading to premature activation and undefined operation. Switching to a PullDown resistor keeps the switch in reset. This issue affects the CC100, the Touch Pa…
-
Medium max 7.7VDE-2025-077 2 CVEs
Phoenix Contact: Two vulnerabilities in the jq JSON processor utilized by FL MGUARD 110x devices
The jq JSON processor, which is used to migrate firmware configurations in the product, contains 2 vulnerabilities that can be exploited by an authenticated attacker.
-
Medium max 6.5VDE-2025-066 1 CVE
SMA: Directory Traversal in Sunny Boy
A security researcher discovered a Directory Traversal vulnerability in Sunny Boy 3, which allows remote attackers to access sensitive information. The vulnerability is already fixed since January 2021 with version 3.10.27.R.
-
Medium max 6.5VDE-2025-050 1 CVE
SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user
A security researcher discovered a data disclosure vulnerability in Sunny Portal powered by ennexOS, ennexos.sunnyportal.com. A regularly authenticated user can receive the name of an other registered Sunny Portal user by entering the email address of this re…
-
Medium max 5.5
CODESYS Control V3 - Insecure default permissions
On certain operating systems (e.g., Linux), default file system permissions may allow read access to the files of the CODESYS Control runtime system for non-administrator users. The documentation provided with the CODESYS Runtime Toolkit does not explicitly a…
-
Medium max 5.5VDE-2025-043 1 CVE
Lenze: PLC Designer V4 with insecure storage of sensitive information
A security vulnerability was discovered in the PLC Designer V4 in the version 4.0.0 where the programmer of a Controller can set a password for the connected device. Here it is possible in an interface of the PLC Designer V4 for the programmer to enter a pass…
-
Medium max 6.4
SMA: Sunny Webbox clickjacking vulnerability
A security researcher discovered that in the affected products a clickjacking vulnerability in the web frontend exists. An attacker could lure the user to click on a malicious website which seems to be the WebUI of the affected product. The affected products …
first Jan 27, 2025 -
Medium max 5.3
CODESYS (Edge) Gateway for Windows insecure default
The CODESYS Gateway enables communication between CODESYS runtimes and other clients, primarily the CODESYS Development System V3. It is usually installed as a part of the CODESYS Development System V3 setup and accessed locally by the CODESYS Development Sys…
first Mar 18, 2025 -
Medium max 6.6
CODESYS Control V3 removable media path traversal
A low privileged attacker with physical access to a controller, that supports removable media and is running a CODESYS Control runtime system, can exploit the insufficient path validation by connecting removable media with a file system supporting symbolic li…
first Mar 18, 2025 -
Medium max 4.2
CODESYS Key physical side-channel vulnerability
The CODESYS Key USB dongle, which is based on WIBU CodeMeter technology, is affected by a physical side-channel vulnerability.
first Jan 21, 2025 -
Medium max 5.9
WAGO: Multiple products affected by Terrapin
Several WAGO Firmwares are vulnerable to a to a remote attack which allows to bypass the integrity check through OpenSSH. This called Terrapin attack occurs because of mishandled handshake phase.
first Feb 22, 2024 -
Medium max 5.5
Pilz: Multiple products affected by ZipSlip
Several Pilz software products do not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.
first Nov 24, 2022 -
Medium
BECKHOFF: Null Pointer Dereference vulnerability in products with OPC UA technology
By tricking clients of the mentioned products into contacting malicious OPC UA servers and thereby acting as OPC UA clients, a crash of the component can be provoked.
first Mar 1, 2022