541 results · Feed
-
Critical max 9.8VDE-2022-060 4 CVEs
WAGO: Multiple vulnerabilities in web-based management of multiple products
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Add…
-
Critical max 9.1VDE-2022-055 1 CVE
WAGO: Exposure of configuration interface in unmanaged switches
An unknown and undocumented configuration interface with limited functionality was identified on the affected devices.
-
Medium max 5.9VDE-2022-054 1 CVE
WAGO: Unauthenticated Configuration Export in web-based management in multiple devices
A vulnerability in the web-based management (WBM) of WAGOs programmable logic controller (PLC) could allow an unauthenticated remote attacker to retrieve sensitive information.
-
Medium max 6.1VDE-2022-056 1 CVE
Weidmueller: Multiple IoT and control products affected by JavaScript injection vulnerability
A JavaScript injection vulnerability has been discovered in the XML editing system SCHEMA ST4 onlinehelp by Quanos Solutions GmbH. For details refer to CVE.This vulnerability may allow an attacker to inject JavaScript code via URL to the affected products
-
High max 9.8VDE-2022-033 2 CVEs
Pilz: PASvisu and PMI affected by multiple vulnerabilities
PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised t…
-
High max 8.1VDE-2022-052 1 CVE
Miele: Vulnerability in ease2pay cloud service used by appWash
Up until October 5th, 2022 the ease2pay API used by Miele's "AppWash" MobileApp was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain read and partial write access to other users data by modifying a small pa…
-
Critical max 9.8VDE-2022-043 3 CVEs
Wiesemann & Theis: Multiple Vulnerabilities in the Com-Server Family
Multiple Wiesemann & Theis product families are affected by multiple vulnerabilities in the web interface.
-
Critical max 9.8VDE-2022-023 1 CVE
TRUMPF TruTops prone to improper access control
During the installation of specific TRUMPF Windows applications, privileged local users with default usernames and passwords are created. An adversary could use these users to access and compromise the affected Windows systems and, under certain circumstances…
-
High max 7.5VDE-2022-042 1 CVE
WAGO: Multiple products - Loss of MAC-Address-Filtering after reboot
The MAC address filter as part of the firewall has a flaw, which prevents the MAC address filter to be active after restart. In this way a remote attacker is able to circumvent the MAC address filtering after a reboot of a device.
-
High max 7.5VDE-2022-047 1 CVE
WAGO: FTP-Server - Denial-of-Service
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of service condition on devices that incorporate a vulnerable version of th…
-
Medium max 5.3VDE-2022-011 1 CVE
MB connect line: Unauthenticated user enumeration in mbCONNECT24 and mymbCONNECT24
An issue was discovered in the mymbCONNECT24 and mbCONNECT24 software in all versions through V2.11.2.
-
Critical max 7.5VDE-2022-039 20 CVEs
Helmholz: Multiple vulnerabilites in myREX24 and myREX24.virtual
Multiple vulnerabilities have been found in myREX24 and myREX24.virtual.
-
Critical max 7.5VDE-2021-003 18 CVEs
MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A)
Multiple vulnerabilities have been found in mymbCONNECT24 and mbCONNECT24. Update A, 2022-09-07: Affected Products: updated affected versions due to incomplete fixes of some CVEs. See Solution for details. Solution: updated version information. Solution: Adde…
-
High max 7.8VDE-2022-031 4 CVEs
WAGO: Multiple Products Series affected by multiple CODESYS vulnerabilities
Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.
-
Critical max 9.9VDE-2022-035 6 CVEs
WAGO: Multiple product series affected by multiple CODESYS vulnerabilities
Multiple WAGO product families are prone to multiple vulnerabilities affecting CODESYS control runtime system.
-
High max 7.5VDE-2022-034 2 CVEs
TRUMPF: Products prone to Unified Automation vulnerabilities
A number of TRUMPF software tools use the OPC UA Server in C++ based OPC UA SDK by Unified Automation. The application contains several vulnerabilities, which enable an attacker to send malicious data to the application, resulting in a Denial-of-Service.
-
Critical max 5.9VDE-2022-032 73 CVEs
AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service
The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include an outdated version of ntpd which is affected by a large number …
-
Critical max 9.8VDE-2022-030 1 CVE
Lenze: Vulnerability in the OPC-UA authentification connection in the firmware
The machine controller of the cabinet series include an OPC-UA server which uses an user management to authenticate clients via anonymous or user/password authentication. If the user/password authentication is selected, password verification is skipped upon s…
-
High max 9.8VDE-2021-004 1 CVE
Weidmueller: EtherNet/IP Fieldbus Coupler out-of-bounds write
A critical vulnerability has been discovered in the utilized component EtherNet/IP Adapter Development Kit (EADK) by Pyramid Solutions, Inc.. For details refer to CVE(s).This vulnerability may allow an attacker to send a specially crafted packet that may resu…
-
Critical max 6.5VDE-2022-019 8 CVEs
Endress+Hauser: Multiple products utilizing vulnerable WIBU-SYSTEMS CodeMeter components
For detailed information please refer to WIBU SYSTEMS original Advisories at https://wibu.com/support/security-advisories.html.
-
High max 8.8
Pepperl+Fuchs: Vulnerability in multiple VisuNet devices
Critical vulnerabilities have been discovered in the utilized component Remote Desktop Client by Microsoft.For more information see: https://msrc.microsoft.com/update-guide/vulnerability/CVE- 2022-21990
first Apr 26, 2022 -
Critical max 9.1VDE-2022-018 2 CVEs
PHOENIX CONTACT: Multiple vulnerabilities in RAD-ISM-900-EN-BD devices
Multiple vulnerabilities have been discovered in the firmware and in libraries utilized of RAD-ISM-900-EN-BD devices: In addition to the above listed CVEs the following issues were identified: Vulnerabilities related to outdated libraries: BusyBox version 0.6…
-
Critical max 9.8VDE-2022-016 1 CVE
TRUMPF: TruTops Fab, TruTops Boost prone to vulnerability
A service function in the stated TRUMPF products is exposed without necessary authentication. Execution of this function may result in unauthorized access to, change of data or disruption of the whole service.
-
High max 7.3VDE-2022-015 1 CVE
Miele: Security vulnerability in Benchmark Programming Tool
The Miele Benchmark Programming Tool on a Microsoft Windows operating system, selects a folder by default upon installation that is writable for all users (C:\\MIELE_SERVICE). After the installation of the tool, users without administrative privileges are abl…
-
Critical max 8.1VDE-2021-055 10 CVEs
Pilz: PMC programming tool 2.x.x affected by multiple vulnerabilities
The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a wo…
-
Critical max 9.9VDE-2021-054 18 CVEs
Pilz: Multiple vulnerabilities in CODESYS V2 and V3 runtime system
Several Pilz products use Versions V2 and V3 of the CODESYS runtime system from CODESYS GmbH, which enables the execution of IEC 61131-3 PLC programs. These runtime environments contain several vulnerabilities, which an attacker can exploit via the network. S…
-
Critical max 9.9VDE-2021-061 27 CVEs
Pilz: PMC programming tool 3.x.x affected by multiple vulnerabilities
The software product PMC programming tool from Pilz is based on the software CODESYS Development System from CODESYS GmbH. This software is affected by several vulnerabilities, which an attacker can exploit locally or via the network. This means that, in a wo…
-
Critical max 9.8VDE-2021-047 7 CVEs
Bender/ebee: Multiple Charge Controller Vulnerabilities
Bender is publishing this advisory to inform customers about multiple security vulnerabilities in the Charge Controller product families.Bender has analysed the weaknesses and determined that the electrical safety of the devices is not concerned. To Benders k…
-
Critical max 9.8VDE-2022-008 9 CVEs
WEIDMUELLER: Multiple vulnerabilities in Modbus TCP/RTU Gateways
Multiple issues have been found in the affected products. See CVE descriptions for details.
-
Medium max 6.5VDE-2022-006 1 CVE
Endress+Hauser: FieldPort SFP50 Memory Corruption in Bluetooth Controller Firmware
Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial of service.
-
Medium max 5.4VDE-2022-004 1 CVE
WAGO: Web-Based Management Cross-Site Scripting
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates.Various configuration pages of the device are vulnerable to reflected XSS (Cross-Site Scripting) attacks.
-
Critical max 8.2VDE-2021-050 12 CVEs
WAGO: Multiple devices affected by Vulnerabilities in NUCLEUS TCP Stack.
Multiple vulnerabilities were reported in the Nucleus Real-Time Operating System (RTOS). The Nucleus RTOS is an essential component in several WAGO PLCs and fieldbus coupler. WAGO uses older Versions of the Nucleus RTOS also in legacy products. For additional…
-
High max 7.5VDE-2021-046 2 CVEs
PHOENIX CONTACT: XSS and memory-leak in FL MGUARD 1102/1105
Cross-site scripting in web-based management and memory leak in the remote logging function of FL MGUARD 1102 and FL MGUARD 1105. CVE-2021-34582: The file upload functionality in the web-based management is affected by a stored cross-site scripting vulnerabil…
-
CriticalVDE-2021-048 3 CVEs
Lenze: Multiple Vulnerabilities in CODESYS Control V2 communication
The affected products contain a CODESYS Control runtime system in version V2. They are therefore affected by the vulnerability described in CODESYS Advisory 2021-06. It provides a communication server for the communication with clients like the CODESYS Develo…
-
Critical max 7.5VDE-2021-033 8 CVEs
TRUMPF Laser GmbH: multiple products prone to codesys runtime vulnerabilities
The TruControl laser control software (versions 1.04 to 3.0.0) uses CODESYS runtime versions affected by multiple CVEs: **CVE list:** - CVE-2021-29242 - CVE-2021-29241 - CVE-2019-5105 - CVE-2020-7052 - CVE-2019-9012 - CVE-2019-9010 - CVE-2019-9009 - CVE-2018-…
-
High max 8.8
Pepperl+Fuchs: Security Advisory for PrintNightmare Vulnerability in multiple HMI Devices
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could th…
-
High max 8.6VDE-2021-018 4 CVEs
Pepperl+Fuchs: Multiple vulnerabilites in ICE1 Ethernet IO Modules
Critical vulnerability has been discovered in the utilized components rcX, mbedTLS, PROFINET IO Device and EtherNet/IP Core by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerabilities on the affected device is that it can result in: *…
-
Medium max 5.3
Beckhoff: DoS-Vulnerability for TwinCAT OPC UA Server and IPC Diagnostics UA Server
Some TwinCAT OPC UA Server and IPC Diagnostics UA Server versions from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of …
first Apr 27, 2021 -
High max 7.3VDE-2020-048 1 CVE
M&M Software (WAGO): Deserialisation of untrusted data in fdtContainer
The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component. The fdtCONTAINER component exchanges binary data blobs with such a host a…
-
Critical max 8.8VDE-2020-049 4 CVEs
Phoenix Contact: Multiple vulnerabilities in PLCnext Control devices < 2021.0 LTS
Multiple vulnerabilities have been identified in PLCnext Control devices. Please consult the aforementioned CVE-IDs.