96 results · Clear filters · Feed
-
Medium max 4.3VDE-2025-020 1 CVE
WAGO: Switches affected by year 2k38 problem
The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1st, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetti…
-
Medium max 6.5
SMA: Sunny Portal Remote Code Execution
A security researcher discovered a critical Remote Code Execution vulnerability in sunnyportal.com. An attacker could upload code instead of an image and remotely execute this code.
first Feb 26, 2025 -
Medium max 6.5
Pilz: PAS 4000 prone to ZipSlip
PAS4000 is the software platform for the Automation System PSS 4000. PAS 4000 does not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.
first Nov 24, 2022 -
Medium
PHOENIX CONTACT: mGuard IKE daemon remote denial of service
Openswan 2.6.39 and earlier, which is used in the mGuard firmware version 8.0.0 to 8.5.1, allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
first Mar 7, 2017 -
Medium
PHOENIX CONTACT: Denial-of-Service vulnerabilty in Emalytics, ILC 2050 BI and ILC 2050 BI-L
A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart to correct.
first Aug 20, 2020 -
Medium max 5.3
Beckhoff: EtherLeak in TwinCAT RT network driver
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are n…
first Jun 16, 2020 -
Medium max 5.5
Beckhoff: Denial-of-Service vulnerability in the IPC-Diagnostics package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, a user can post s…
first Aug 27, 2024 -
Medium max 4.7
Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf
With TwinCAT/BSD based products the HTTPS request to the Authelia login page accepts user-controlled input that specifies a link to an external site.
first Dec 13, 2023 -
Medium max 7.3
Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, a user can post s…
first Aug 27, 2024 -
Medium max 6.5
Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
Through specific nodes of the server configuration interface of the TwinCAT OPC UA Server administrators are able to remotely create and delete any files on the system which the server is running on, though this access should have been restricted to specific …
first Nov 4, 2021 -
Medium
WAGO: XSS vulnerability in Web-UI in WAGO 750-88X and WAGO 750-89X
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The SNMP configuration page of the device is vulnerable for a persistent XSS (Cross-Site Scripting) attack.
first Sep 30, 2020 -
Medium max 4.2
Phoenix Contact: Security Advisory for ESL Stick USB-A
A vulnerability has been found in a cryptographic library of Infineon Technologies that is part of the firmware of the CmDongles. The exploitation of this vulnerability has been classified as complex: potential attackers need physical access and require speci…
first Jan 14, 2025 -
Medium max 5.3
Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
The pathfinder TCP encapsulation service is vulnerable to a drain of open file descriptors.
first Sep 10, 2024 -
Medium max 5.9
PHOENIX CONTACT: FL MGUARD affected by two vulnerabilities
The FL MGUARD family of devices is affected by two vulnerabilities.
first Jun 13, 2023 -
Medium
Pepperl+Fuchs: Path traversal in WirelessHART Gateway
Pepperl+Fuchs analyzed WirelessHART-Gateways in respect of a critical vulnerability within the Firmware. An attacker may exploit this vulnerability to get access to files and access restricted directories that are stored on the device by manipulating file par…
first Mar 6, 2019 -
Medium max 5.3
Helmholz: Unauthenticated user enumeration in myREX24 and myREX24.virtual
An issue was discovered in myREX24 and myREX24.virtual in all versions through 2.11.2.
first Sep 7, 2022 -
Medium max 6.5
Endress+Hauser: Ecograph T utilizing Webserver firmware version 2.x exposes sensitive information
The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-cont…
first Nov 19, 2020 -
Medium max 5.8
WAGO: Series PFC100/PFC200 Information Disclosure
The reported vulnerability allows a remote attacker to check paths and file names that are used in filesystem operations. **Update, 18.9.2019, 18:30** * fixed typo in modelname, replaced PCF with PFC.
first Sep 18, 2019 -
Medium max 5.4
SMA: SQL injection in Sunny Central UP
A security researcher discovered that in the affected products an authenticated (administration privileges) SQL injection has been found on the administration panel allowing access to a database. The database that can be accessed is a log database in which me…
first Nov 27, 2024 -
Medium max 8.8
PHOENIX CONTACT: Products utilizing WIBU SYSTEMS CodeMeter components in versions prior to V7.21a
Please consult the CVE entries above for more details.
first Aug 4, 2021 -
Medium
PHOENIX CONTACT: Security Advisory for PLCNext, SMARTRTU AXC, CHARX control modular and EEM-SB37x
The vulnerability is a Time-of-Check-Time-of-Use (CWE-367) issue which allows an attacker with access to the firmware update file to overwrite it after it has been verified (but before installation is completed), which consequently allows installing an arbitr…
first May 4, 2021 -
Medium
PHOENIX CONTACT: FL COMSERVER cross-site scripting (XSS) vulnerability
A cross-site scripting (XSS) vulnerability affects PHOENIX CONTACT FL COMSERVER products running firmware versions prior to 1.99, 2.20, or 2.40.
first Dec 5, 2017 -
Medium
PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
first Nov 9, 2017 -
Medium max 5.6
Pepperl+Fuchs: HMI devices vulnerable to Meltdown and Spectre Attacks
Critical vulnerabilities within several CPUs have been identified by security researchers. These hardware vulnerabilities allow programs to learn about the contents of a system's memory, using side-channel attacks. Potential attack vectors against these vulne…
first Feb 14, 2018 -
Medium max 6.4
PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
A vulnerability in the use of hard-coded Platform Keys (PK) within the UEFI framework, known as PKfail, has been discovered in several Pepperl+Fuchs devices.
first Nov 26, 2024 -
Medium
Pepperl+Fuchs: ecom Mobile devices prone to Android privilege elevation vulnerability
An attacker may gain access (by elevated privileges) to CT50-Ex mobile computers through a vulnerability in a system service running the Android Operating System (OS). The system service improperly validates incoming connection requests. Although the vulnerab…
first Oct 19, 2018 -
Medium
MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1
Multiples issues exist in mymbCONNECT24 and mbCONNECT24
first Sep 18, 2020 -
Medium
MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24
Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution. Please consult the CVE entries for details.
first Jul 22, 2021 -
Medium
Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks
Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.
first May 18, 2021 -
Medium max 6.1VDE-2025-024 1 CVE
Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated jQuery version
Multiple W&T devices are shipped with a jQuery version with a known XSS vulnerability.
-
Medium max 5.4VDE-2025-032 1 CVE
Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting
Multiple W&T Products are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via crafted payloads injected into several input fields of the configuration webpage.
-
Medium max 5.3
CODESYS Visualization user management bypass in WebVisu
An unauthenticated attacker can read static visualization files of the CODESYS WebVisu, by bypassing the CODESYS Visualization user management applying forced browsing.
-
Medium max 7.2VDE-2025-033 3 CVEs
ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC IRF Products
The ADS-TEC firewall products IRF1000, IRF2000, and IRF3000 include Eclipse Mosquitto, affected by multiple vulnerabilities. Exploitation requires a compromised upstream MQTT broker, limiting direct device exposure.
-
Medium max 6.5
Beckhoff: Local command injection via TwinCAT Package Manager
Beckhoff's TwinCAT 3.1 Build 4026 software is modularized and is installed with different packages depending on user requirements. These packages are selected and installed using either the command line utility tcpkg or the corresponding graphical user interf…
first Oct 31, 2024 -
Medium max 5.4
Wago: Vulnerability in libwagosnmp
Nozomi Networks reported a vulnerability in the pfc firmware sdk-G2 of libwagosnmp. The WAGO pfc-firmware-sdk-G2 is a software development kit designed for WAGO PFC devices which allows developers to build and customize the firmware.
first Mar 5, 2025 -
Medium max 7.5
Weidmueller: OpenSSL vulnerability in industrial ethernet switches
Multiple Weidmueller products are affected by an OpenSSL vulnerability. Weidmüller has released new firmwares of the affected products to fix the vulnerability.
-
Medium max 4.4VDE-2024-046 1 CVE
OSCAT: Out-of-bounds read in OSCAT Basic library
The OSCAT Basic library is one of several libraries developed and provided by OSCAT. OSCAT (oscat.de) stands for "Open Source Community for Automation Technology". The OSCAT Basic library offers function blocks for various tasks, e.g. for buffer management, l…
-
Medium max 4.9
WAGO: Controller with CODESYS 2.3 Runtime Denial-of-Service
An authenticated attacker can send a malformed packet to trigger a device crash via the CODESYS V2 runtime commands parsing. Update: 08.07.2024 release date of the updates has been changed.
first Jun 25, 2023 -
Medium max 5.9VDE-2024-029 1 CVE
Phoenix Contact: Unbounded growth of OpenSSL session cache in multiple FL MGUARD devices
The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.
-
Medium max 6.5VDE-2024-023 1 CVE
Welotec: Clickjacking Vulnerability in WebUI
Welotec has been informed by an external source that the WebUI of the device management solution "SMART EMS" and the remote connectivity solution "VPN Security Suite" is vulnerable to so-called "Clickjacking" and advises to update to version v3.1.4 or later.