541 results · Feed
-
Medium max 6.5VDE-2024-023 1 CVE
Welotec: Clickjacking Vulnerability in WebUI
Welotec has been informed by an external source that the WebUI of the device management solution "SMART EMS" and the remote connectivity solution "VPN Security Suite" is vulnerable to so-called "Clickjacking" and advises to update to version v3.1.4 or later.
-
High max 8.8VDE-2023-039 2 CVEs
Wago: Multiple vulnerabilities in web-based management of multiple products
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning, and updates. The option to change the configuration data via tools or the web-based-management enabled attackers to prepare cross-…
-
Critical max 9.8VDE-2024-011 13 CVEs
PHOENIX CONTACT: Multiple vulnerabilities in CHARX SEC charge controllers
Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. These vulnerabilities were discovered as part of a PWN2OWN competition initiated by Trend Micro Zero Day Initiative (ZDI).
-
Critical max 9.0VDE-2024-002 6 CVEs
Pilz: Multiple products affected by uC/HTTP vulnerability
The PITreader product family is using the 3rd -party-component uC/HTTP to implement the web server functionality. uC/HTTP is affected by multiple vulnerabilities. These vulnerabilities may enable an attacker to gain full control over the system.
-
Critical max 9.8VDE-2024-001 2 CVEs
TRUMPF: Multiple products contain WIBU CodeMeter vulnerabilities
The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60d) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilitie…
-
Critical max 9.8VDE-2024-006 3 CVEs
TRUMPF: Oseon contains vulnerable version of OpenSSL 1.1.x
Multiple vulnerabilities in the included versions of OpenSSL can lead to different problems, including crashes of the OpenSSL modules (leading to a Denial of Service) or leakage of plaintext. These underlying vulnerabilities can be fixed by installing a softw…
-
Critical max 9.8VDE-2024-007 2 CVEs
WAGO: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products
A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretation in Javascript, both used in CodeMeter Runtime affecting multiple products by WAGO. WIBU-SYSTEMS Codemeter is installed by default during e!COCKPIT and WAGO-I/O-Pro (C…
-
Critical max 9.8VDE-2023-055 1 CVE
Phoenix Contact: Automation Worx and classic line controllers prone to Incorrect Permission Assignment for Critical Resource
Phoenix Contact classic line industrial controllers are developed and designed for the use in closed industrial networks. The controllers don't feature a function to check integrity and authenticity of the application (e.g.: logic files, executable logic, con…
-
High max 8.8VDE-2023-049 1 CVE
Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability
Frauscher Sensortechnik GmbH FDS102 for FAdC/FAdCi v2.10.1 is vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface by using an authenticated session cookie.
-
High max 8.8VDE-2023-066 1 CVE
CODESYS: OS Command Injection Vulnerability in multiple CODESYS Control products
UPDATE 29.02.2024: Removed "This version is planned for January 2024." from Solution as the updated version is released.On CODESYS Control runtimes running on Linux or QNX operating systems, successfully authenticated PLC programmers can utilize SysFile or CA…
-
High max 8.8
Pilz: Electron Vulnerabilities in PASvisu and PMI v8xx
The Builder and Viewer components of the product PASvisu are based on the 3rd-party-component Electron. Electron contains several other open-source components which are affected by vulnerabilities. The vulnerabilities may enable an attacker to gain full contr…
-
High max 7.5VDE-2023-044 1 CVE
Wago: Vulnerabilities in IEC61850 Server / Telecontrol
The Library WagoAppRTU which is part of the Wago Telecontrol Configurator is prone to improper input validation. By sending specifically crafted MMS packets an attacker can trigger a denial-of-service condition.
-
Medium max 4.3VDE-2023-045 1 CVE
Wago: Vulnerability in Smart Designer Web-Application
An attacker with privileges can enumerate projects and usernames through an iterative process, by making a request to a specific endpoint.
-
Critical max 9.8VDE-2023-035 1 CVE
CODESYS: Multiple products affected by WIBU Codemeter vulnerability
Several CODESYS setups contain and install vulnerable versions of the WIBU CodeMeter Runtime.
-
Critical max 9.8VDE-2023-062 2 CVEs
Phoenix Contact: WIBU-SYSTEMS CodeMeter Runtime vulnerabilities in multiple products
A heap-based buffer overflow caused by libcurl and wrong whitespace character interpretationin Javascript, both used in CodeMeter Runtime affecting multiple products by PHOENIX CONTACT.
-
Critical max 9.8VDE-2023-037 1 CVE
WAGO: Remote Code execution vulnerability in managed Switches
Affected products are vulnerable to remote code execution via command injection in the web-based management by an attacker.
-
Medium max 5.3VDE-2023-015 1 CVE
WAGO: Improper privilege management in web-based management
There is a misconfiguration of access rights to a configuration tool of the web-based-management for a specific user, which allows to reset passwords of other users (except root). This allows an authenticated attacker to elevate his privileges.
-
Critical max 9.8
Trumpf: Multiple Products affected by WIBU Codemeter Vulnerability
The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60b) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilitie…
first Sep 13, 2023 -
Critical max 9.8
Phoenix Contact: Multiple products affected by WIBU Codemeter Vulnerability (Update A)
A Vulnerability in WIBU-SYSTEMS CodeMeter Runtime affects multiple Phoenix Contact products. Phoenix Contact devices using CodeMeter embedded are not affected by this vulnerability. Update A, 2023-11-13 Removed CVE-2023-4701 because it was revoked.
first Sep 19, 2023 -
Medium max 4.3VDE-2023-041 1 CVE
MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical devi…
-
Medium max 4.3VDE-2023-043 1 CVE
Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual
A vulnerability in the affected products allows an authenticated, low-privileged attacker to gain unauthorized read access to limited, non-critical device information. The issue arises from improper access validation.
-
Critical max 9.8
WAGO: Multiple Vulnerabilities in Controller with WAGO I/O-Pro / CODESYS 2.3 Runtime
UPDATE A: Solution has updated release datesUPDATE B: Solution has updated release datesThis Advisory is published with reference to: CODESYS Advisory 2022-11 (Security update for CODESYS Control V2) CODESYS Advisory 2022-12 (Security update for CODESYS V2 pa…
first Oct 17, 2022 -
Critical max 9.8VDE-2023-038 3 CVEs
Frauscher: Multiple Vulnerabilities in FDS101
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are prone to multiple vulnerabilities which could lead up to a full compromise of the FDS101 device.
-
High max 8.1VDE-2024-042 1 CVE
MB connect line: Multiple products are vulnerable to regreSSHion
Several Red Lion Europe products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
-
Medium max 4.8VDE-2023-012 1 CVE
MB connect line: Cross-site Scripting vulnerability in mbNET/mbNET.rokey
A stored XXS vulnerability has been found in mbNET and mbNET/.rokey in all versions before 7.3.2.
-
Medium max 4.8VDE-2023-029 1 CVE
Helmholz: Cross-site Scripting vulnerability in REX 200/REX 250
A stored XXS vulnerability has been found in REX 200 and REX 250 in all versions before 7.3.2.
-
Medium max 6.1VDE-2023-027 1 CVE
AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations
A reflected cross-site scripting vulnerability exists in the System Diagnostics Manager (SDM) component of SIMA² Master Stations.
-
High max 8.8VDE-2023-025 1 CVE
CODESYS: Control runtime system memory and integrity check vulnerabilities
The CODESYS Control V3 runtime system does not restrict the memory accesses of the PLC application code to the PLC application data and does not sufficiently check the integrity of the application code by default. This could be exploited by authenticated PLC …
-
Low max 3.3VDE-2023-023 1 CVE
CODESYS: Missing Brute-Force protection in CODESYS Development System
The CODESYS Development System does not limit the number of attempts to guess the password within an import dialog.
-
High max 8.8VDE-2023-022 1 CVE
CODESYS: Missing integrity check in CODESYS Development System
The Notification Center of the CODESYS Development System receives messages without ensuring that the message was not modified during transmission. This finally enables MITMs code execution when the user clicks the "Learn More" button.
-
High max 7.3VDE-2023-021 1 CVE
CODESYS: Vulnerability in CODESYS Development System allows execution of binaries
The CODESYS Development System is vulnerable to the execution of malicious binaries from the current working directory.
-
Medium max 6.5VDE-2023-019 15 CVEs
CODESYS: Multiple Vulnerabilities in CmpApp CmpAppBP and CmpAppForce
CODESYS Control V3 runtime systems are affected by several security vulnerabilities in the communication server implementations for the CODESYS protocol. These may be exploited by authenticated attackers.
-
High max 7.5VDE-2023-014 1 CVE
WAGO: Bluetooth LE vulnerability in WLAN-ETHERNET-Gateway
A vulnerability allows Bluetooth LE pairing traffic to be sniffed and used to bypass authentication for pairing.
-
High max 7.3VDE-2023-024 1 CVE
CODESYS: Vulnerability in CODESYS Development System and CODESYS Scripting
In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by l…
-
High max 7.5VDE-2023-011 1 CVE
Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability
Frauscher Diagnostic System FDS001 for FAdC R1 and FAdCi R1 v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication.
-
High max 7.5VDE-2023-005 1 CVE
WAGO: Series 750-3x/-8x prone to MODBUS server DoS
An unauthenticated attacker with network access to port 502/TCP of the target device can cause a denial-of-service condition by sending multiple specially crafted packets. The MODBUS server does not properly release memory resources that were reserved for inc…
-
High max 8.8VDE-2023-008 2 CVEs
Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual
Two vulnerabilites have been discovered in myREX24 and myREX24.virtual in all versions through 2.13.3.
-
CriticalVDE-2023-009 18 CVEs
ads-tec: Multiple Vulnerabilities in IRF1000, IRF2000 and IRF3000
The affected products integrate the vulnerable libraries in a way so that the vulnerabilities can't be exploited remotely without prior authentication.
-
High max 8.8VDE-2023-004 1 CVE
Phoenix Contact: Directory Traversal Vulnerability in ENERGY AXC PU Web service
A Directory Traversal Vulnerability enables arbitrary file access in ENERGY AXC PU Web service.An authenticated restricted user of the web frontend can access, read, write and create files throughout the file system using specially crafted URLs via the upload…
-
Critical max 9.8VDE-2022-061 1 CVE
VARTA: Multiple devices prone to hard-coded credentials
VARTA energy storage systems have a web user interface via which users and installers can access live data measurements and configure the system to their needs. It has been discovered that the corresponding credentials are hard-coded within the frontend and t…