541 results · Feed
-
CriticalVDE-2020-043 1 CVE
Bender: COMTRAXX < 4.2.0 affected by inadquate credentials check vulnerability
Bender is publishing this advisory to inform customers about a security vulnerability in all devices running the COMTRAXX software. The user authorization is validated for most, but not all routes in the system. A user with knowledge about the routes can read…
-
Critical max 9.8VDE-2020-040 5 CVEs
Pepperl+Fuchs: Multiple Products prone to multiple vulnerabilities in Comtrol RocketLinux
Several critical vulnerabilities within Firmware have been identified. Please consult the CVEs for details.
-
CriticalVDE-2020-034 6 CVEs
Pepperl+Fuchs: VMT MSS and VMT IS - Several vulnerabilities in products utilizing WIBU-SYSTEMS CodeMeter components
Several vulnerabilities have been discovered in the utilized component WIBU-SYSTEMS CodeMeter Runtime. For detailed information please refer to WIBU-SYSTEMS original Advisories at https://wibu.com/support/security-advisories.html
-
CriticalVDE-2020-030 3 CVEs
PHOENIX CONTACT: Products utilizing WIBU-SYSTEMS CodeMeter components
Several vulnerabilities have been discovered in WIBU-SYSTEMS CodeMeter and published 08 September 2020. Phoenix Contact is only affected by a subset of these vulnerabilities. Phoenix Contact products are not affected by vulnerabilities WIBU-200521-01 (CVE-202…
-
CriticalVDE-2020-015 1 CVE
WAGO: Web Based Management - Code Execution Vulnerability
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. An attacker needs an authorized login with administrative privileges on the device in order to exploit the herein ment…
-
Critical max 9.8VDE-2020-018 1 CVE
PHOENIX CONTACT: FL MGUARD, TC MGUARD, TC ROUTER and TC CLOUD CLIENT: PPPD vulnerable to CVE-2020-8597
FL MGUARD, TC MGUARD, TC ROUTER and TC CLOUD CLIENT devices are affected by a buffer overflow vulnerability within the PPP service. The PPP service is not active by default, but is used commonly at TC ROUTER, TC CLOUD CLIENT. It is also running in the followi…
-
Critical max 10.0VDE-2020-016 1 CVE
SWARCO: Critical Vulnerability in CPU LS4000
An open port used for debugging grants root access to the device without access control via network.
-
HighVDE-2020-013 1 CVE
PHOENIX CONTACT: Local Privilege Escalation in Portico Remote desktop control software
If the software runs as a service, a user with limited access can gain administrator privileges by starting a shell with administrator rights from the Import / Export configuration dialog.
-
CriticalVDE-2020-010 1 CVE
WAGO: Cloud Connectivity Remote Code Execution Vulnerability
An attacker needs an authorized login with administrative privileges on the device in order to exploit the herein mentioned vulnerability. The weakness allows an attacker which has admin privileges on the device to redirect to his own Azure cloud account and …
-
HighVDE-2020-007 1 CVE
WAGO: Web-Based Management Denial of Service
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for commissioning and update. The controller is an embedded device which has limited resources. The vulnerability described here takes advantage of this fact.With sp…
-
CriticalVDE-2019-022 7 CVEs
WAGO: Multiple Vulnerabilities in I/O-Check Service in Multiple Devices
The reported vulnerabilities allow a remote attacker to change the setting, delete the application, set the device to factory defaults, code execution and to cause a system crash or denial of service. Note(s) The following products are affected by the listed …
-
Critical max 9.8
Pepperl+Fuchs: Remote code execution vulnerability in HMI devices
A remote code execution vulnerability exists in **Remote Desktop Services** – formerly known as **Terminal Services** – when an unauthenticated attacker connects to the target system using **RDP** and sends specially crafted requests. This vulnerability is **…
first May 29, 2019 -
Critical max 8.8VDE-2019-013 19 CVEs
WAGO: Multiple Vulnerabilities in industrial managed switches
Multiple vulnerabilities have been identified in WAGO 852-303, 852-1305 and 852-1505 industrial managed ethernet switches.
-
HighVDE-2019-005 9 CVEs
Endress+Hauser: WIFI enabled products utilising WPA2
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
-
HighVDE-2019-004 5 CVEs
Pepperl+Fuchs: ecom Mobile Devices prone to BlueBorne Attack
A collection of Bluetooth attack vectors were discovered and related vulnerabilities known as "BlueBorne" were disclosed. These vulnerabilities collectively endanger amongst others Windows, Linux and mobile operating systems like Android or IOS. An unauthenti…
-
High
Pepperl+Fuchs / ecom instruments: WLAN enabled products utilizing WPA2 encryption
Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on ei…
first Dec 11, 2017 -
Medium max 5.6
Pepperl+Fuchs: Security advisory for MELTDOWN and SPECTRE attacks in ecom mobile Devices
Critical vulnerabilities within several CPUs have been identified by security researchers. These hardware vulnerabilities allow programs to learn about the contents of a system's memory, using side-channel attacks. Potential attack vectors against these vulne…
first Jul 6, 2018 -
HighVDE-2018-015 1 CVE
Phoenix Contact: AXL F BK PN Denial of Service Vulnerability
Incorrect handling request with non-standard symbols allows remote attackers to initiate a complete lock up of the bus coupler. Authentication of the request is not required.
-
High max 7.5VDE-2018-012 1 CVE
PHOENIX CONTACT: ILC 1x1 ETH Denial of Service
The processing program of the IEC 61131 program can be slowed down or stopped completely by creating a large amount of network traffic that needs to be handled by the ILC.
-
HighVDE-2018-008 1 CVE
Pepperl+Fuchs: Remote Code Execution Vulnerability in HMI Devices
A remote code execution vulnerability in the Microsoft's Credential Security Support Provider protocol (CredSSP) was identified by security researchers. If exploited successfully, it is possible to relay user credentials for arbitrary code execution on the ta…
-
MediumVDE-2018-005 1 CVE
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure
Web interface CGI applications may copy the contents of the running configuration file to a commonly accessed file. Clever manipulation of a web login request can expose the contents of this file through to the web browser. A successful web interface login at…