541 results · Feed
-
Medium
MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1
Multiples issues exist in mymbCONNECT24 and mbCONNECT24
first Sep 18, 2020 -
Low
MB connect line: multiple products partially affected by DNSpooq
Multiple issues have been identified in dnsmasq < 2.83
first Apr 26, 2021 -
Critical max 9.8
MB connect line: Privilege escalation in mbDIALUP
Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management. Update A, 2021-11-24 corrected fixed version in solution from 3.9R0.4 to 3.9R0.5 Update B, 2022-03-28 Updat…
first Jul 22, 2021 -
High max 7.5
MB connect line: Remote user enumeration in mbCONNECT24/mymbCONNECT24
An issue was discovered in the mymbCONNECT24 and mbCONNECT24 software in all versions through V2.9.0.
first Oct 27, 2021 -
Medium
MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24
Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution. Please consult the CVE entries for details.
first Jul 22, 2021 -
High max 8.1
Helmholz: Multiple products are vulnerable to regreSSHion
Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
first Jul 31, 2024 -
Medium
Endress+Hauser: products utilizing WPA2 vulnerable to KRACK attacks
Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the optional WLAN display is present.
first May 18, 2021 -
Critical
Endress+Hauser: Promass 83 with EtherNet/IP affected by a stack-based buffer overflow
Promass 83 devices utilizing 499ES EtherNet/IP (ENIP) Stack by Real Time Automation (RTA) are vulnerable to a stack-based buffer overflow. Update A, 2021-10-07: added credits changed title from "ENDRESS+HAUSER: Promass 83 with Ether/IP affected by DoS vulnera…
first Oct 4, 2021 -
Medium max 6.1VDE-2025-024 1 CVE
Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated jQuery version
Multiple W&T devices are shipped with a jQuery version with a known XSS vulnerability.
-
Critical max 9.8
Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in several products
A vulnerability in the Wibu CodeMeter Runtime, which is part of the installation packages of several Festo products, was found. An attacker exploiting the vulnerability in WIBU CodeMeter Runtime in server mode could gain full access to the affected server via…
first Nov 28, 2023 -
Medium max 5.4VDE-2025-032 1 CVE
Wiesemann & Theis: Multiple W&T Products are vulnerable to cross-site-scripting
Multiple W&T Products are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via crafted payloads injected into several input fields of the configuration webpage.
-
Critical max 9.1VDE-2025-031 1 CVE
Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated TLS protocol versions
Com-Server firmware versions prior to 1.60 support the insecure TLS 1.0 and TLS 1.1 protocols, which are susceptible to man-in-the-middle attacks and thereby compromise the confidentiality and integrity of data.
-
Low max 2.7
WAGO: Multiple products vulnerable to local file inclusion
An attacker with administrative privileges which can access sensitive files, can additionally access them in an unintended, undocumented way.
first Oct 23, 2023 -
Medium max 5.3
CODESYS Visualization user management bypass in WebVisu
An unauthenticated attacker can read static visualization files of the CODESYS WebVisu, by bypassing the CODESYS Visualization user management applying forced browsing.
-
Medium max 7.2VDE-2025-033 3 CVEs
ads-tec Industrial IT: Mosquitto MQTT Client Vulnerability in ADS-TEC IRF Products
The ADS-TEC firewall products IRF1000, IRF2000, and IRF3000 include Eclipse Mosquitto, affected by multiple vulnerabilities. Exploitation requires a compromised upstream MQTT broker, limiting direct device exposure.
-
High max 9.1
Endress+Hauser: Ecograph T utilizing Webserver firmware version 1.x suffers from improper privilege management
The affected device has a web-based user interface with a role-based access system. Users with different roles have different write and read privileges. The access system is based on dynamic "tokens".
first Nov 19, 2020 -
Medium max 6.5
Beckhoff: Local command injection via TwinCAT Package Manager
Beckhoff's TwinCAT 3.1 Build 4026 software is modularized and is installed with different packages depending on user requirements. These packages are selected and installed using either the command line utility tcpkg or the corresponding graphical user interf…
first Oct 31, 2024 -
Medium max 5.4
Wago: Vulnerability in libwagosnmp
Nozomi Networks reported a vulnerability in the pfc firmware sdk-G2 of libwagosnmp. The WAGO pfc-firmware-sdk-G2 is a software development kit designed for WAGO PFC devices which allows developers to build and customize the firmware.
first Mar 5, 2025 -
High max 7.8
Multiple TRUMPF products prone to nftables server vulnerabilities
TruControl laser control software from versions 3.50.0 to 4.00.0.B use Linux kernel versions affected by CVE-2024-1086. The affected kernel vulnerability could lead to local privilege escalation.
first Jun 25, 2024 -
High max 8.1
Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities
TruControl laser control software prior to version 1.60.0 uses an OpenSSH server version affected by CVE-2024-6387. The affected OpenSSH Server version could potentially lead to a remote code execution.
first Jun 25, 2024 -
High max 8.1
Pilz: Vulnerability in PASvisu and PMI v8xx
Multiple Pilz products are affected by stored cross-site-scripting (XSS) vulnerabilities. The vulnerabilities may enable an attacker to gain full control over the system. Update: 27.02.2024 Fix typo in advisory title
first Jan 30, 2024 -
High max 7.5
CODESYS: CODESYS web server vulnerable to DoS
The CODESYS web server component of the CODESYS Control runtime system is used by the CODESYS WebVisu to display visualization screens in a web browser. Receiving a specifically crafted TLS packet on an HTTPS connection causes the CODESYS web server to crash …
first Sep 25, 2024 -
High max 7.8
Lenze: Install Directory with insufficient permissions
The following tools: * VisiWinNET Smart * VisiWinNET Professional * EASY UI Designer create a directory with insufficient permissions, allowing a low-level user the ability to add and modify certain files that hold SYSTEM privileges, which could lead to privi…
first Sep 3, 2024 -
High max 8.6VDE-2025-036 19 CVEs
Multiple vulnerabilities in Endress+Hauser MEAC300-FNADE4
Several vulnerabilities in the Endress+Hauser MEAC300-FNADE4 were discovered, that can be accessed via Ethernet.
-
Medium max 7.5
Weidmueller: OpenSSL vulnerability in industrial ethernet switches
Multiple Weidmueller products are affected by an OpenSSL vulnerability. Weidmüller has released new firmwares of the affected products to fix the vulnerability.
-
High max 8.8
SMA: Cluster Controller CSRF vulnerability
A security researcher discovered a Cross Site Request Forgery (CSRF, XSRF) vulnerability in SMA Cluster Controller. The affected products are out of support (End-of-Life 2018-06-30).
first Jan 27, 2025 -
Critical max 9.8
Several Codesys Gateway v2 vulnerabilities in Codesys provided by Festo
An unauthenticated attacker would be able to send crafted requests to cause the CODESYS Gateway Server V2 to allocate excessive memory or consume all available TCP client connections. Besides, passwords are insufficiently checked during login. All versions of…
-
High max 7.5VDE-2024-072 1 CVE
WAGO: Vulnerabilities in CODESYS Control
The following firmware versions installed on several devices are vulnerable due to a vulnerability in the CODESYS Control V3 web server.
-
Critical max 9.8
Wago: Vulnerable WIBU-SYSTEMS Codemeter installed through e!COCKPIT and WAGO-I/O-Pro (UPDATE B)
Critical vulnerability has been discovered in the utilized component PROFINET IO Device by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerability on the affected device is that it can no longer perform acyclic requests may drop all es…
first Sep 25, 2023 -
Medium max 4.4VDE-2024-046 1 CVE
OSCAT: Out-of-bounds read in OSCAT Basic library
The OSCAT Basic library is one of several libraries developed and provided by OSCAT. OSCAT (oscat.de) stands for "Open Source Community for Automation Technology". The OSCAT Basic library offers function blocks for various tasks, e.g. for buffer management, l…
-
Critical max 9.8VDE-2024-041 1 CVE
Endress+Hauser: Multiple products are vulnerable to code injection
Echo Curve Viewer is an utility used for offline visualization of previously recorded envelope curve data. Envelope curve records are exported from other Endress+Hauser software products like FieldCare as .curves files. Echo Curve Viewer opens .curves files a…
-
High max 8.1VDE-2024-043 1 CVE
Welotec: Multiple products are vulnerable to regreSSHion
Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.
-
High max 7.8
Pepperl+Fuchs: Use after free vulnerability in Smart-Ex 02 and Smart-Ex 03
A critical security vulnerability was discovered in the products, which is caused by the IPv6 stack in the Linux kernel.The impact of the vulnerability on the affected products may result in Elevation of privileges
-
Medium max 4.9
WAGO: Controller with CODESYS 2.3 Runtime Denial-of-Service
An authenticated attacker can send a malformed packet to trigger a device crash via the CODESYS V2 runtime commands parsing. Update: 08.07.2024 release date of the updates has been changed.
first Jun 25, 2023 -
High max 7.2
Helmholz: REX 100 vulnerable to OS command injection
There exists a vulnerability in all REX 100 devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30pm In section Reported by Sebastian Dietz (CyberDanube) was added.
-
High max 7.2VDE-2024-030 1 CVE
MB connect line: mbNET.mini vulnerable to OS command injection
There exists a vulnerability in all mbNET.mini devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30 pm In section Reported by Sebastian Dietz (CyberDanube) was ad…
-
Medium max 5.9VDE-2024-029 1 CVE
Phoenix Contact: Unbounded growth of OpenSSL session cache in multiple FL MGUARD devices
The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.
-
High max 7.3VDE-2023-068 17 CVEs
WAGO: Multiple Vulnerabilities in e!Cockpit and e!Runtime / CODESYS Runtime
The following vulnerabilities are published with reference to CODESYS Advisory 2023-05, CODESYS Advisory 2023-06 and CODESYS Advisory 2023-09
-
High max 8.3VDE-2024-021 2 CVEs
WAGO: Vulnerability in WAGO Navigator
The WAGO Navigator versions 1.0.1 and 1.0 are vulnerable due to the use of the WiX toolset version 3.11.2.
-
High max 7.8VDE-2024-019 5 CVEs
Phoenix Contact: Multiple vulnerabilities in the Firmware of CHARX SEC charge controllers
Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. Update: credis have been updated