541 results · Feed
-
High max 7.8
TRUMPF Laser GmbH: TruControl 2.14.0 to 3.14.0 affected by recent sudo vulnerability
TruControl laser control software from versions 2.14.0 to 3.14.0 use sudo versions affected by CVE-2021-3156. The affected sudo has a heap-based buffer overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends wit…
first Mar 22, 2021 -
High max 9.4
Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service
**PIT User Authentication Service is part of the operating mode selection and access permission system PITmode.** The PIT User Authentication Service is affected by multiple vulnerabilities in included third-party components.
-
Critical max 9.8
Festo: Several vulnerabilities in FactoryViews
FactoryViews bundles many third-party applications which are used in background processes to provide the software's features. From time to time, vulnerabilities in these bundled applications are discovered. These are typically fixed in newer versions of Facto…
first Jul 10, 2023 -
High max 8.8
Beckhoff: Privilege escalation and information leak via Beckhoff Device Manager
The vulnerability CVE-2025-41726 (NN-2025-0074) allows an authenticated remote user to execute arbitrary commands on the device. This can be exploited over the web UI or via API. In one case the execution of the arbitrary command happens within a privileged p…
-
High max 9.8
WAGO: Vulnerabilities in WAGO Industrial-Managed Switches
Two remote stack buffer overflow vulnerabilities were discovered in WAGO industrial switches. These issues originate from unsafe input handling in custom HTTP request parsing functions within the lighttpd binary. The affected binary lacks modern security feat…
first Dec 10, 2025 -
Critical max 9.8
ifm moneo password reset can be exploited
moneo \"Forgot Password\" function has a vulnerability which allows gaining privileged access.
first May 6, 2024 -
Critical max 9.8
ifm: Vulnerabilities in ifm AC14 firmware
In ifm Smart PLC firmware up to version 4.3.17 for Smart PLC controllers AC14xx and AC4xxS, an attacker can access the configuration by using the hardcoded credentials. The endpoint hosts a scripts capable of executing various commands.
first Jul 9, 2024 -
High max 8.8VDE-2025-073 1 CVE
Phoenix Contact: Security Advisory for TC ROUTER and CLOUD CLIENT Industrial mobile network routers
A code injection vulnerability at the upload-config endpoint in the firmware of TC ROUTER and CLOUD CLIENT Industrial Mobile network routers has been discovered that can be exploited by an high privileged attacker.
-
High max 7.1
Phoenix Contact: Multiple Vulnerabilities in FL SWITCH 2xxx Firmware
Multiple vulnerabilities have been identified in the FL SWITCH 2xxx firmware prior to version 3.50. Two of these (CVE-2025-41692 and CVE-2025-41696) enable an attacker to access the device's file system. Two other vulnerabilities (CVE-2025-41693 and CVE-2025-…
first Dec 9, 2025 -
Critical max 9.8
IFM: weak password recovery vulnerability in moneo appliance
An unauthenticated remote attacker could reset the administrator's password with information from the default, self-signed certificate.
first Dec 12, 2022 -
High max 7.8
Draeger: ICMHelper is vulnerable to a privilege escalation
A security vulnerability was identified in the ICMHelper service running on the system of an ICM installation. A low privileged local attacker could exploit this vulnerability to issue OS commands with the highest privileges.
first Aug 5, 2025 -
Medium max 6.5HBSA-2025-0002 1 CVE
BLE ICM Vulnerability in JBL Headphones
The BLE controller in certain consumer products fails to properly validate the channel map field in connection requests, enabling attackers within radio range to cause a denial of service through a specially crafted packet.
-
High max 8.8HBSA-2025-0001 1 CVE
BLE GATT Service Vulnerability in JBL Headphones
Due to improper BLE security configurations and lack of authentication on the GATT server of JBL LIVE PRO 2 TWS and JBL TUNE FLEX Headphones, unauthenticated users can read and write device control commands through the mobile app service.
-
Critical max 9.8VDE-2025-105 1 CVE
Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability
A vulnerability in Wibu-Systems CodeMeter (up to version 7.60b) affects multiple Endress+Hauser products. This flaw can lead to a heap buffer overflow, which may allow remote code execution under certain conditions.
-
Critical max 9.8
Several Vulnerabilities in MES PC (Windows 10)
MES PCs shipped with Windows 10 come pre-installed with XAMPP. XAMPP is a bundle of third-party open-source applications including the Apache HTTP Server, the MariaDB database and more. From time to time, vulnerabilities in these applications are discovered. …
first Feb 27, 2024 -
High max 7.8
CODESYS Development System - Deserialization of Untrusted Data
A vulnerability has been discovered in the print engine of the CODESYS development system. If a CODESYS project file or archive file was crafted in a specific way, the CODESYS development system could execute arbitrary code when a user opens these files and c…
-
Medium max 7.5VDE-2025-094 1 CVE
Janitza: Vulnerability in Modbus interface of UMG 96-PA and UMG 96-PA-MID+
A vulnerability in the devices UMG 96-PA and UMG 96-PA-MID+ enables an unauthenticated remote attacker to cause the device to become unavailable.
-
Medium max 6.5
WAGO: Vulnerabilities in WAGO Device Manager
Vulnerabilities have been discovered in the WAGO Device Manager that allow any origin to access the server and set header values, as well as an endpoint that permits read access to the file system. The WAGO Device Manager is a software for configuring and par…
first Jun 16, 2025 -
Critical max 9.8VDE-2025-097 5 CVEs
METZ CONNECT: Config API – Authentication bypass leads to admin takeover in EWIO2 series
A critical authentication bypass in EWIO-2 allows unauthenticated attackers with network access to gain administrative control over the device. Once compromised, an attacker can change configurations, manipulate data, disrupt services, and potentially render …
-
High max 7.4VDE-2025-086 1 CVE
Jumo: Predictable debug-interface password in variTRON series
A vulnerability was identified in the variTRON password generation algorithm of the debug-interface. The PRNG is initialized with the current Unix Timestamp, thus the resulting password is predictable. With the password root-access to the UART and ssh Interfa…
-
Critical max 9.8
Festo: Siemens S7-1500/ET200SP CPU used in Festo Didactic products contains a memory protection bypass vulnerability
Siemens SIMATIC S7-1200 and S7-1500 CPUs contained in various Festo Didactic products contain a memory protection bypass vulnerability that could allow an attacker to write arbitrary data and code to protected memory areas or read sensitive data to launch fur…
first Sep 9, 2024 -
High max 8.8
Festo: Multiple products contain CoDe16 vulnerability
Several high severity vulnerabilities in CODESYS V3 affecting Festo products could lead to Remote Code Execution or Denial of Service.
first Jan 30, 2024 -
High max 7.5VDE-2025-062 3 CVEs
WAGO: Multiple Vulnerabilities in CODESYS components
Several WAGO firmwares installed on different devices are impacted by various CODESYS vulnerabilities. These affect the runtime, visualization, and OPC UA server.
-
Critical max 9.8
Festo: Controller CECC-S,LK,D family <= 2.3.8.1 - multiple vulnerabilities in CODESYS V3 runtime system
The Festo controller CECC product family is affected by multiple vulnerabilities in the CODESYS V3 runtime.
first Jul 18, 2022 -
Critical max 9.8
Festo: Incomplete documentation of remote accessible functions and protocols in Festo products
Incomplete Festo product documentation of remote accessible functions and their required IP ports. Depending on the product a description of the supported features can be found in the product documentation to some extent. Update A, 2022-12-13 Added affected d…
first Nov 29, 2022 -
Critical max 9.8
Festo: Multiple Festo products contain an unsafe default Codesys configuration
The products are shipped with an unsafe configuration of the integrated CODESYS Runtime environment. In this case no default password is set to the CODESYS PLC and therefore access without authentication is possible. With a successful established connection t…
first Nov 29, 2022 -
High max 9.8
Sauter: Multiple vulnerabilities in SAUTER modulo 6
Vulnerabilities have been discovered in the embedded firmware of SAUTER modulo 6 devices. These vulnerabilities affect the embedded web server as well as the interface to the SAUTER CASE Suite tools.
first Oct 21, 2025 -
High max 7.5PPSA-2025-004 1 CVE
Pilz: Vulnerability affecting PASvisu Runtime
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.
-
High max 8.8
Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
A vulnerability in the firmware of CHARX SEC-3xxx charging controllers has been discovered.
first Oct 14, 2025 -
Low max 7.5VDE-2025-091 1 CVE
Murrelektronik: Cleartext Transmission of Sensitive Information in IMPACT67 Pro
The embedded web interface of the MURRELEKTRONIK IMPACT67 Pro PN DIO8 IOL8 transmits login credentials over unencrypted HTTP using a GET request. The device does not offer HTTPS/TLS support, exposing user credentials to passive interception by any attacker on…
-
High max 7.5
CODESYS Control V3 - NULL pointer dereference
A vulnerability in the CODESYS Control runtime system's CmpDevice component allows unauthenticated attackers to cause a denial-of-service (DoS) via specially crafted communication requests. The issue is triggered by a NULL pointer dereference and also affects…
first Aug 4, 2025 -
High max 7.5VDE-2025-072 5 CVEs
Phoenix Contact: Security Advisory for QUINT4-UPS EIP
Multiple vulnerabilities were discovered in the firmware of QUINT4-UPS EIP devices that can be used by an unauthenticated remote attacker to perform Denial of Service attacks and to gather login credentials for the Webfrontend.
-
High
Festo: Vulnerable WIBU-SYSTEMS CodeMeter Runtime in multiple products
A vulnerability was reported in WIBU-SYSTEMS CodeMeter Runtime. WIBU-SYSTEMS CodeMeter Runtime is part of the installation packages of several Festo products.FluidDraw < 6.2c and CIROS <= 7.0.6 contain a vulnerable version of WIBU-SYSTEMS CodeMeter Runtime.
first Dec 13, 2022 -
Medium max 6.5
Festo: Cross-Site-Scripting (XSS) vulnerability in LX-Appliance
A vulnerability in the Video.js package could allow a user of LX Appliance, with a high privilege account (i.e., with the "Teacher" role), to craft a malicious course and launch an XSS attack.
first Aug 29, 2023 -
High max 8.8
Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions
Incomplete user documentation of undocumented, authenticated test mode and further remote accessible functions. The supported features may be covered only partly by the corresponding user documentation. Festo developed the products according to the respective…
first Sep 5, 2023 -
Medium max 5.6
PHOENIX CONTACT: addressing Meltdown and Spectre vulnerabilities
Several CPUs manufactured by Intel, AMD or based on ARM technology may leak information due to their internal operation if attacked by specifically written software executed on the affected systems. The information in this advisory is based on the statements …
first Mar 23, 2018 -
High max 7.3
Festo: Vulnerable Siemens TIA-Portal in multiple Festo Didactic products
A vulnerability was reported in Siemens TIA Portal. TIA Portal is part of the installation packages of several Festo Didactic products. TP 260 before June 2023 and MES PC based on DELL XE3 contain a vulnerable versions of TIA Portal V15 to V18. Affected produ…
first Oct 17, 2023 -
Critical max 9.8VDE-2025-087 2 CVEs
WAGO: Vulnerabilities in Device Sphere and Solution Builder
Due to a missing authentication check, the WAGO Solution Builder and the WAGO Device Sphere are vulnerable to a potential information exposure.
-
High max 7.5
WAGO: 750-8xx Controller Denial of Service
The 750-8xx controller are susceptible to a Denial-of-Service attack due to a flood of network packets. Please consult the original paper for details (link at the bottom of this advisory).
first Aug 17, 2018 -
High max 8.8
Welotec: Path Traversal in SmartEMS Upload Handling
A path traversal flaw in the SmartEMS upload handling allows authenticated users to direct upload data outside of the intended directory via the 'Upload-Key' header. In deployments where writable, code-interpreted paths are reachable, this may lead to remote …
first Sep 10, 2025