541 results · Feed
-
Critical max 9.4
Weidmueller: Accidentally open network port in u-controls and IoT-Gateways
A network port intended only for device-internal usage is accidentally accessible via external network interfaces.
first May 4, 2021 -
High max 7.3
Weidmueller: WI Manager affected by fdtContainer vulnerability
A vulnerability has been discovered in the fdtCONTAINER component and application by M&M Software GmbH. As this software is part of the Weidmüller FDT/DTM Software with WI Manager, this Weidmueller software is affected by the above vulnerability as well. The …
first Jan 20, 2021 -
High max 7.5
WAGO: Vulnerabilities in CODESYS Control V3 - OPC UA Stack
Several WAGO Firmwares are vulnerable to an incorrect calculation of the buffer size in the CODESYS OPC UA STACK. This can lead to a crash of the runtime of the affected firmware versions installed on several devices.
first Feb 4, 2025 -
Critical
WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro
Multiple vulnerabilities were reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (CODESYS 2.3) installations. All currently existing e!COCKPIT installation bundles and WAGO-I/O-Pro (CODESYS 2.3…
first Aug 31, 2021 -
Critical max 10.0
WAGO: Multiple Vulnerabilities in the Web-Based Management Interface
The Web-Based Management (WBM) of WAGOs industrial managed switches is typically used for administration, commissioning and updates. The reported vulnerabilities allow an attacker with access to the device and the Web-Based Management, to install malware, acc…
first May 5, 2021 -
Critical
WAGO: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT
Multiple vulnerabilties were reported in WIBU-SYSTEMS Codemeter. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT installation. All currently existing e!COCKPIT installation bundles contain vulnerable versions of WIBU-SYSTEMS Codemeter.
first Sep 9, 2020 -
High
WAGO: Web-Based Management Authentication Vulnerabilities
With special crafted requests it is possible to get sensitive information, in this case the password hashes, by measuring response delay. With a substantial amount of time this data can be used to calculate the passwords of the Web-Based Management users. In …
first Mar 9, 2020 -
High max 8.2
WAGO: Vulnerability in web-based authentication in WAGO 750-8XX Version <= FW07
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters without authentication.
first Sep 30, 2020 -
Critical max 9.8
WAGO: PPPD in PFC100 and PFC200 Series is vulnerable to CVE-2020-8597
WAGO PLCs uses Linux as operating system and offers the ambitious user the opportunity to make their own modifications to expand the functionality of the PLC. For this reason the pppd daemon is also part of the operating system but it is not activated in the …
first Jun 10, 2020 -
Medium max 5.8
WAGO: Series PFC100/PFC200 Information Disclosure
The reported vulnerability allows a remote attacker to check paths and file names that are used in filesystem operations. **Update, 18.9.2019, 18:30** * fixed typo in modelname, replaced PCF with PFC.
first Sep 18, 2019 -
Medium max 5.4
SMA: SQL injection in Sunny Central UP
A security researcher discovered that in the affected products an authenticated (administration privileges) SQL injection has been found on the administration panel allowing access to a database. The database that can be accessed is a log database in which me…
first Nov 27, 2024 -
Critical max 8.2
Pilz: Multiple products prone to WIBU-SYSTEMS CodeMeter vulnerabilities
A number of Pilz software tools use the Software CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to change and falsify a licence file, prevent normal operat…
first Sep 10, 2020 -
High max 7.5
Phoenix Contact: Security Advisory for AXL F BK and IL BK bus couplers
A denial of service (DoS) attack targeting port 80 (http service) can overload the device (CWE-770). This behaviour has been observed when running network security scanners.
first May 13, 2025 -
Medium max 8.8
PHOENIX CONTACT: Products utilizing WIBU SYSTEMS CodeMeter components in versions prior to V7.21a
Please consult the CVE entries above for more details.
first Aug 4, 2021 -
High
PHOENIX CONTACT: Advisory for mGuard products
The integrity of the mGuard firmware atomic update process cannot be guaranteed under all circumstances. The mGuard atomic update mechanism relies on internal checksums for the integrity verification of some portions of the update packages. The verification o…
first Jan 30, 2018 -
High max 7.5
PHOENIX CONTACT: DoS for PLCnext Control devices in versions <2021.0.5 LTS
A device on the same network as the controller sending a special crafted JSON request to the /auth/access-token endpoint may cause the controller to restart (CWE-20). UPDATE A The CVSS score has been raised from 7.7 (CVSS:3.0:AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A…
first Aug 4, 2021 -
High max 7.4
PHOENIX CONTACT: Security Advisory for PLCNext, ILC 2050 BI, FL MGUARD DM UNLIMITED, TC ROUTER und CLOUD CLIENT products
A Denial of Service and a CA Check Problem have been identified in multiple openSSL 1.1.1 versions, which are utilized in the Phoenix Contact products listed above.
first Jun 23, 2021 -
Medium
PHOENIX CONTACT: Security Advisory for PLCNext, SMARTRTU AXC, CHARX control modular and EEM-SB37x
The vulnerability is a Time-of-Check-Time-of-Use (CWE-367) issue which allows an attacker with access to the firmware update file to overwrite it after it has been verified (but before installation is completed), which consequently allows installing an arbitr…
first May 4, 2021 -
High max 7.5
PHOENIX CONTACT: Security Advisory for FL SWITCH SMCS series
Multiple vulnerabilities have been discovered in the current firmware of the PHOENIX CONTACT FL SWITCH SMCS series switches.
first Jun 23, 2021 -
High max 7.5
PHOENIX CONTACT: Security Advisory for FL COMSERVER UNI
When the communication partner sends an invalid Modbus exception response to the FL COMSERVER UNI as a query, the Modbus communication stops, and the device will be unresponsive for some minutes before the functionality is fully restored (CWE-772).
first Jun 23, 2021 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Command Injection
An attacker with permission to transfer configuration files to/from the switch or permission to upgrade firmware, is able to execute arbitrary OS shell commands. CGI applications config_transfer.cgi and software_update.cgi are prone to OS command injection th…
first May 16, 2018 -
High max 7.8
PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite
Manipulated PC Worx or Config+ projects could lead to a remote code execution when unallocated memory is freed because of incompletely initialized data (CWE-824). The attacker needs to get access to an original bus configuration file (*.bcp) to be able to man…
first Jun 23, 2021 -
High max 7.5
PHOENIX CONTACT: BTP Touch Panels uncontrolled resource consumption
Uncontrolled Resource Consumption can be exploited to cause the HMI to become unresponsive and not accurately update the display content (Denial of Service).
first Dec 2, 2020 -
Critical max 5.4
PHOENIX CONTACT: mGuard <8.8.3 products missing initialization of resource
For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource (CWE-909).
first Dec 17, 2020 -
High max 8.2
PHOENIX CONTACT: Improper path sanitation on import of project files in PLCnext Engineer
The build settings of a PLCnext Engineer project (.pcwex) can be manipulated in a way that can result in the execution of remote code. The attacker needs to get access to a PLCnext Engineer project to be able to manipulate files inside. Additionally, the file…
first Jul 21, 2020 -
High max 7.8
PHOENIX CONTACT: Two Vulnerabilities in Automation Worx Suite
Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation. The attacker needs to get access to an original PC Worx project to be able to manipulate data inside the project folder. After manipulation the attac…
first Jul 1, 2020 -
High max 8.8
PHOENIX CONTACT: TC Router and TC Cloud Client multiple vulnerabilities
Multiple Vulnerabilities exist in components used by the aforementioned products. See CVE-Details for more information.
first Mar 5, 2020 -
High
PHOENIX CONTACT: Security Advisory for Automation Worx Software Suite
Manipulated PC Worx or Config+ projects could lead to a remote code execution due to insufficient input data validation. The attacker needs to get access to an original PC Worx or Config+ project to be able to manipulate data inside the project folder. After …
first Oct 15, 2019 -
Medium
PHOENIX CONTACT: FL COMSERVER cross-site scripting (XSS) vulnerability
A cross-site scripting (XSS) vulnerability affects PHOENIX CONTACT FL COMSERVER products running firmware versions prior to 1.99, 2.20, or 2.40.
first Dec 5, 2017 -
High
PHOENIX CONTACT: Multiple Vulnerabilities in Automation Worx Software Suite
A manipulated PC Worx or Config+ project file could lead to a remote code execution.\ The attacker needs to get access to an original PC Worx or Config+ project file to be able to manipulate it. After manipulation the attacker needs to exchange the original f…
first Jun 19, 2019 -
Medium
PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
first Nov 9, 2017 -
High
PHOENIX CONTACT: unauthorized access to WEB-UI on FL NAT SMx
After login the source IP is used as the session identifier, so that users sharing the same source IP are able to gain full authenticated access to the WEB-UI. The access attempt will only be successful if the former authorized session has not been terminated…
first Mar 25, 2019 -
Critical max 7.3
PHOENIX CONTACT: Security Advisory for AXL F BK and IL BK products
An undocumented password protected FTP access to the root directory exists in certain devices of the AXL F BK and IL BK product families (CWE-798).
first Jun 23, 2021 -
High
PHOENIX CONTACT: command injection on RAD-80211-XD(/HP-BUS)
A WebHMI utility may be exploited by any logged in user allowing the execution of arbitrary OS commands on the server. This provides the opportunity for a command injection attack.
first Mar 25, 2019 -
High max 8.1
PEPPERL+FUCHS: Multiple products are affected by regreSSHion
The affected devices run a SSH server that is affected by the regreSSHion vulnerability despite the fact that no user can actually log in through SSH. Attackers may exploit this vulnerability to gain root access to the device.
first Oct 8, 2024 -
High max 7.3
Pepperl+Fuchs: Vulnerability allowing code-excution in PACTware <=5.0.5.31
A critical vulnerability has been discovered in the fdtCONTAINER component by M&M Software GmbH used by PACTware. While de-serializing PACTware 5 project files (loading PW5 files) the vulnerability can be exploited to execute arbitrary code.
first Jan 15, 2021 -
Medium max 5.6
Pepperl+Fuchs: HMI devices vulnerable to Meltdown and Spectre Attacks
Critical vulnerabilities within several CPUs have been identified by security researchers. These hardware vulnerabilities allow programs to learn about the contents of a system's memory, using side-channel attacks. Potential attack vectors against these vulne…
first Feb 14, 2018 -
Medium max 6.4
PEPPERL+FUCHS: HMI devices are affected by Insecure Platform Key
A vulnerability in the use of hard-coded Platform Keys (PK) within the UEFI framework, known as PKfail, has been discovered in several Pepperl+Fuchs devices.
first Nov 26, 2024 -
Medium
Pepperl+Fuchs: ecom Mobile devices prone to Android privilege elevation vulnerability
An attacker may gain access (by elevated privileges) to CT50-Ex mobile computers through a vulnerability in a system service running the Android Operating System (OS). The system service improperly validates incoming connection requests. Although the vulnerab…
first Oct 19, 2018 -
Critical max 9.8
Miele: Treck TCP/IP Vulnerabilities (Ripple20) affecting Communication Module XKM3000 L MED
For process data documentation purposes the laboratory washers, thermal disinfectors and washer-disinfectors can be integrated in a TCP/IP network by utilizing the affected communication module. The communication module is separate from the actual device cont…
first Jul 8, 2020