541 results · Feed
-
Medium max 5.3
Murrelektronik: Vulnerability in 'Copy learned MAC Addresses' function enables MAC Spoofing on Xelity Switches
An information disclosure vulnerability in the web GUI of Murrelektronik Xelity switches causes MAC addresses from the device's MAC address table to be written into a server-side log that is exposed via the device's web interface to unauthenticated users. The…
first Aug 24, 2026 -
Critical max 9.8VDE-2026-083 2 CVEs
Weidmueller: Security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by multiple vulnerabilities
Weidmueller security routers IE-SR-2TX-WL and IE-SR-2TX-WL-4G are affected by an unauthenticated remote code execution vulnerability. IE-SR-2TX-WL-4G routers are also affected by a SMS password authorization bypass vulnerability. Weidmueller has released new …
-
High max 9.8VDE-2026-078 8 CVEs
Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities
Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-…
-
Critical max 9.8VDE-2025-056 3 CVEs
Phoenix Contact: Improper Input Validation Vulnerabilities in PLCnext Firmware
This advisory addresses multiple security vulnerabilities in PLCnext firmware versions prior to 2026.0.3. The vulnerabilities may allow unauthenticated attackers to cause denial of service, trigger unexpected system behavior, or execute unauthorized SQL queri…
-
Medium max 6.5
WAGO: Year 2038 problem
The Year 2038 Problem affects systems using a 32-bit integer to represent time as the number of seconds since January 1, 1970. On January 19, 2038, at 03:14:07 UTC, the time value will exceed the maximum for a 32-bit integer, causing an overflow and resetting…
first Apr 15, 2025 -
High max 8.8
Pilz: Multiple Vulnerabilities affecting industrial PC IndustrialPI
The Linux kernel used in the IndustrialPI, 'linux-image-revpi-v8', prior to version 6.12.91-revpi0-rpi-v8 contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can give an attacker full control over the device.
-
Medium max 6.7VDE-2026-065 1 CVE
Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library
A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.
-
Critical max 9.8VDE-2026-008 20 CVEs
Phoenix Contact: Multiple vulnerabilities in the firmware of CHARX SEC3xxx charging controllers
Multiple vulnerabilities have been identified in the firmware of CHARX SEC-3xxx EV charging controllers, including the CHARX SEC-3000, SEC-3050, SEC-3100, and SEC-3150 models. The flaws could allow attackers to compromise the devices remotely, resulting in a …
-
Medium max 6.5
CODESYS PROFINET Controller - Out-of-bounds Write
CODESYS PROFINET is an add‑on for the CODESYS Development System that provides a fully integrated PROFINET protocol stack along with diagnostic capabilities. When a PROFINET Controller is configured, this vulnerable protocol stack is downloaded to and execute…
-
High max 8.8VDE-2026-076 15 CVEs
ads-tec Industrial IT: Multiple Vulnerabilities in ADS-TEC IRF Products
The ADS-TEC IRF1000 and IRF3000 products are affected by multiple vulnerabilities in firmware releases prior to 2.3.0: authorization, robustness and redirect flaws in the proprietary configuration interface and web UI, and multiple vulnerabilities in the bund…
-
High max 9.8VDE-2026-085 1 CVE
Weidmueller: SQL Injection Vulnerability in PROCON-WEB SCADA
A remote unauthenticated attacker can exploit a SQL injection vulnerability in PROCON-WEB SCADA to execute arbitrary commands.
-
High max 8.8VDE-2026-081 15 CVEs
Weidmueller: Security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities
Weidmueller security routers IE-SR-4TX and IE-SR-4GT are affected by multiple vulnerabilities (CVE-2026-14167, CVE-2026-14168, CVE-2026-14169, CVE-2026-14171, CVE-2026-2291, CVE-2026-4893, CVE-2026-5172, CVE-2026-40510, CVE-2025-68160, CVE-2025-69418, CVE-202…
-
High max 7.8VDE-2026-077 1 CVE
Lenze: Incorrect signature validation in the enable SSH routine
The affected products belong to the Controller or Servo Drive product family and contain a vulnerability in a security-critical activation mechanism for service access. The signature verification of a file used for SSH activation can be compromised, which cou…
-
High max 7.5
MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24
Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.
first May 27, 2026 -
High max 7.5
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual
first May 21, 2026 -
High max 7.5VDE-2026-045 1 CVE
Endress+Hauser: Multiple products affected by SopasET interface vulnerability
A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.
-
Medium max 7.5VDE-2026-063 1 CVE
Murrelektronik Devices Vulnerable to SNMP GETBULK Reflection DDoS
Multiple Murrelektronik network-enabled devices respond to SNMPv2c 'GETBULK' requests with disproportionately large response packets when the requesting party specifies a large max-repetitions value. This response amplification allows the affected devices to …
-
Medium max 5.9VDE-2026-062 1 CVE
Several Murrelektronik Devices use Default SNMP Community Names
Several Murrelektronik devices using Profinet are shipped with the default SNMP community names ('public' for read access and 'private' for write access). If these community strings remain unchanged in the field, an unauthenticated attacker with network acces…
-
High max 8.0VDE-2026-066 10 CVEs
METTLER TOLEDO: Microsoft cumulative patches until March for FreshWay B/D
This update deploys cumulative Microsoft Windows security patches through March 2026 for LTSB 2016, LTSC 2019, and LTSC 2021.
-
High max 8.7
CODESYS EtherNetIP - Improper timeout handling
CODESYS EtherNet/IP is an add‑on for the CODESYS Development System that provides a fully integrated EtherNet/IP protocol stack along with diagnostic capabilities. A flaw in the EtherNet/IP adapter protocol stack library results in a vulnerability within the …
-
Critical max 9.8VDE-2026-031 1 CVE
WAGO: Early-Boot Diagnostic Exposure in WAGO System I/O Field Devices
Certain devices in the WAGO System I/O Field series enable an internal diagnostic capability during the initial stages of system startup. This behavior, which is not part of the publicly documented feature set, briefly allows access to system functions before…
-
Medium
JUMO: Allegro RomPager webserver vulnerability in JUMO mTRONT, DICON touch, AQUIS touch devices
Multiple products from JUMO are affected by webserver vulnerability "CVE-2013-6786, CVE-2014-9222, CVE-2014-9223. This vulnerability leads to DOS of the device by using a misfortune cookie and reflected XSS attacks.
first Jun 23, 2026 -
Critical max 9.8
MBS: Several security vulnerabilities in the UGW web GUI
The MBS Universal Gateways (UGW-A-Series, UGW-X-Series) connect devices using various digital communication protocols within the field of building automation. Several security vulnerabilities have been identified in the UGW web GUI and the underlying firmware…
first Jun 3, 2026 -
High max 7.5
Wiesemann & Theis: Motherbox 3 allows unauthenticated read-only DB access
Motherbox 3 with firmware 1.44 to 1.48 allows an unauthenticated remote attacker read-only access to the internal DB with measurement values from other W&T sensor devices.
first Aug 10, 2025 -
Critical max 10.0VDE-2026-049 20 CVEs
Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-01
Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
-
High max 7.2
Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual
There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
-
High max 7.2VDE-2026-068 1 CVE
MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24
There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.
-
High max 7.5
CODESYS Control V3 - Externally-controlled format string in Auditlog
The CODESYS Control runtime system's CmpAuditLog component allows potentially unauthenticated remote attackers to control the format string of processed log messages. Due to the internal processing logic, the impact is limited to a crash of the CODESYS Contro…
first Mar 24, 2026 -
High max 7.5
CODESYS Control - Out-of-bounds Write
The CmpWebServer component in the CODESYS Control Runtime allows users to create browser-based visualizations for monitoring and controlling industrial processes. Due to improper bounds checking, a specially crafted HTTP request from an unauthenticated remote…
first May 26, 2026 -
High max 8.1
CODESYS Control - Incorrect Authorization
The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups including the visualization administrators group, which is intended solely to manage visualization users. Due to insufficient authorization checks an authen…
first May 26, 2026 -
High max 8.8
CODESYS Control V3 - Untrusted boot application
The CODESYS Control runtime system provides a user management mechanism with multiple privilege groups. While only the privileged Administrators and Developer groups are intended to load or debug applications on the controller, users in the restricted Service…
first Mar 24, 2026 -
Critical max 9.8
TURCK: Multiple Vulnerabilities in Managed Ethernet Switches
Multiple vulnerabilities have been identified in the TBEN-Lx-SE-M2 firmware prior to version 2.1.2.0 in Managed Ethernet Switches.
-
Critical max 9.8VDE-2026-064 21 CVEs
METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3
Multiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be a…
-
High max 7.5
Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
VDE-2026-060: A unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers has been discovered.
-
High max 8.4VDE-2026-054 2 CVEs
MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini
Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.
-
High max 8.4VDE-2026-059 2 CVEs
Helmholz: Multiple vulnerabilities in REX100/REX200/REX250
Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.
-
High max 8.8VDE-2026-050 2 CVEs
Phoenix Contact: PLCnext Firmware Security Issues Related to APPs and Configuration Files
This advisory addresses security issues in PLCnext firmware versions prior to 2026.0.3 that are related to APP handling and the processing of configuration files. The identified vulnerabilities affect APP installation authenticity as well as the handling of c…
-
High max 7.6VDE-2026-053 2 CVEs
METTLER TOLEDO: EVA Karl Fischer titrators affected by libpng vulnerabilities
Titration software versions prior to 2.0.2.6 are affected by libpng vulnerabilities CVE-2026-33416 and CVE-2026-33636.
-
High max 7.8ADVISORY2026-09_VDE-2026-055 2 CVEs
CODESYS Development System - Incorrect Default Permissions
Two local privilege escalation vulnerabilities were identified in the CODESYS Development System. Specifically, the PackageManager and the IPM create temporary directories with insecure default permissions when executed with administrative privileges. This al…
-
Low max 3.7VDE-2026-009 1 CVE
JUMO: Multiple products affected by nodejs vulnerability
A vulnerability in the REST API of the JUMO device allows an attacker to trigger a denial‑of‑service (DoS) condition. Due to an incorrect implementation of the arrayLimit option in the Node.js qs module, limits for incoming request parameters are not properly…