541 results · Feed
-
Medium max 6.5VDE-2025-083 1 CVE
WAGO: Vulnerability in hardware switch circuit
The vulnerability in the Ethernet switch circuit is caused by a PullUp resistor at the reset input, leading to premature activation and undefined operation. Switching to a PullDown resistor keeps the switch in reset. This issue affects the CC100, the Touch Pa…
-
CriticalVDE-2025-080 1 CVE
WAGO: Multiple Vulnerabilities in I/O-Check Service
A missing authentication vulnerability exists in the iocheckd service "I/O-Check" functionality. A single packet can cause a denial of service and weaken credentials resulting in the default documented credentials being applied to the device. An attacker can …
-
Medium max 7.7VDE-2025-077 2 CVEs
Phoenix Contact: Two vulnerabilities in the jq JSON processor utilized by FL MGUARD 110x devices
The jq JSON processor, which is used to migrate firmware configurations in the product, contains 2 vulnerabilities that can be exploited by an authenticated attacker.
-
High max 7.8VDE-2025-075 1 CVE
Beckhoff: Deserialization of untrusted data by TwinCAT 3 Engineering
Beckhoff's TwinCAT 3 Engineering software is intented to craft automation projects consisting of a set of files which are stored locally as files underneath an individual folder or in a packed file. The TwinCAT 3 Engineering stores user settings and preferenc…
-
High max 8.2VDE-2025-064 1 CVE
Phoenix Contact: Products utilizing WIBU-SYSTEMS CodeMeter Runtime Windows Installer have a privilege escalation
A local privilege escalation vulnerability in Phoenix Contact products utilizing WIBU-SYSTEMS CodeMeter Runtime allows users to gain admin rights on freshly installed systems. The CodeMeter Control Center starts with elevated privileges and retains them until…
-
Critical max 9.3
WAGO: Critical sudo Vulnerability in Multiple Products
A vulnerability in sudo allows a low privileged attacker to execute commands with root rights.
-
High max 7.5VDE-2025-048 1 CVE
WAGO: Escalation of Privileges in Coupler Firmware
A design flaw in the file system management exposes internal system partitions - intended to be hidden - during brief moments when they are mounted by the firmware. These partitions contain sensitive data such as firmware and certificates. Although access to …
-
High max 7.4VDE-2025-084 1 CVE
Bender Charge Controller Vulnerability - Unsecure Communication
Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the we…
-
High max 8.8VDE-2025-061 1 CVE
Bender Charge Controller Vulnerability - Disclosure Of Stored Credentials When Authenticated
Bender is publishing this advisory to inform customers about a security vulnerability in the Charge Controller product families. Bender has analyzed the weakness and determined that the electrical safety of the devices is not affected. Bender considers the we…
-
High max 8.3
CODESYS Control V3 - Exposed PKI folder
A vulnerability in the CODESYS Control runtime system allows low-privileged remote attackers to access the PKI folder via CODESYS protocol, enabling them to read and write certificates and keys. This exposes sensitive cryptographic data and allows unauthorize…
first Aug 4, 2025 -
High max 7.5
TRUMPF: Remote support uses an outdated encryption algorithm
The TRUMPF remote support infrastructure selects an outdated encryption algorithm when setting up communication channels for machines. This cannot be prevented for old machines. For most machines it is possible to change the encryption settings.
first Aug 25, 2025 -
Critical max 9.8
Weidmueller: Industrial ethernet switches are affected by multiple vulnerabilities
Weidmueller industrial ethernet switches are affected by multiple vulnerabilities. Weidmueller has released new firmwares of the affected products to fix the vulnerabilities.
first May 27, 2025 -
High max 8.8
Phoenix Contact: Multiple Vulnerabilities in mGuard devices
Confidential data in HTTP query string of user requests. Incomplete sanitation of user input in administrative web interface.
first Sep 10, 2024 -
High max 8.6
Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers
Start sequence for firewall service allows attack during the boot process. Password is reset to default when the device undergoes a firmware upgrade.
first Aug 13, 2024 -
High max 8.2
PEPPERL+FUCHS: Profinet Gateway LB8122A.1.EL – Device is affected by XSS vulnerability and information disclosure
A stored cross-site scripting vulnerability has been discovered in the profinet gateway LB8122A.1.EL. An attacker can write an HTML tag with up to 32 characters in the message field of a HART transmitter. The HTML tag is interpreted as HTML when the HART info…
first May 26, 2025 -
Critical max 9.8
Pepperl+Fuchs: Anonymous FTP server and Telnet access allows information disclosure and manipulation
Critical vulnerabilities has been discovered in the product, mainly caused by ananonymous FTP server and Telnet access.The impact of the vulnerabilities on the affected device may result in Information disclosure Denial of service Device manipulation
first Jul 10, 2024 -
Critical max 9.1
Vulnerabilities in mbCONNECT24/mymbCONNECT24
The data24 service that is bundled with every installation of mbCONNECT24/mymbCONNECT24 has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.
first Mar 18, 2025 -
Critical max 9.8
MB connect line: Multiple Vulnerabilities in mbNET.mini Product
Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.
first Oct 15, 2024 -
Critical max 9.8
Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product
Multiple vulnerabilities have been discovered in REX100 allowing for RCE or unauthorized file access.
first Oct 15, 2024 -
Medium max 6.5VDE-2025-066 1 CVE
SMA: Directory Traversal in Sunny Boy
A security researcher discovered a Directory Traversal vulnerability in Sunny Boy 3, which allows remote attackers to access sensitive information. The vulnerability is already fixed since January 2021 with version 3.10.27.R.
-
High max 8.2
Festo: Multiple vulnerabilities in Ethernet/IP Stack of SBRD-Q/SBOC-Q/SBOI-Q
The affected product families are cameras SBOC/SBOI and the Controller SBRD. The vulnerabilities are located within the Ethernet IP Stack from EIPStackGroup OpENer Ethernet/IP.
first Sep 22, 2021 -
Critical max 9.8VDE-2025-076 1 CVE
Welotec: Hard-coded JWT secret in egOS WebGUI
A hard-coded JWT secret in the egOS WebGUI backend is readable to the default user, allowing attackers to forge valid tokens and access protected API endpoints.
-
Medium max 6.5VDE-2025-050 1 CVE
SMA: Sunny Portal limited disclosure of personal data of registered users to an authenticated user
A security researcher discovered a data disclosure vulnerability in Sunny Portal powered by ennexOS, ennexos.sunnyportal.com. A regularly authenticated user can receive the name of an other registered Sunny Portal user by entering the email address of this re…
-
High max 7.8VDE-2025-063 1 CVE
Phoenix Contact: Device and Update Management Windows Installer Privilege Escalation
A privilege escalation vulnerability exists in Phoenix Contact Device and Update Management prior to version 2025.3.1 due to misconfigured permissions on nssm.exe in the DAUM-WINDOWS-SERVICE. This misconfiguration allows a low-privileged local user to execute…
-
Medium max 5.5
CODESYS Control V3 - Insecure default permissions
On certain operating systems (e.g., Linux), default file system permissions may allow read access to the files of the CODESYS Control runtime system for non-administrator users. The documentation provided with the CODESYS Runtime Toolkit does not explicitly a…
-
High max 7.2VDE-2025-065 1 CVE
MB connect line: Sandbox escape in mbNET's LUA interpreter
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in mbNET devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.
-
High max 7.2VDE-2025-069 1 CVE
Helmholz: Sandbox escape in REX200/250 LUA interpreter
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.
-
Critical max 9.1
Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerable to OS Command Injection Vulnerability
Frauscher Sensortechnik FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi R2 and all previous versions are vulnerable to OS Command Injection via malicious configuration file. CVE-2025-3626 affects FDS102 versions v2.8.0 < v2.13.3. CVE-2025-3705 affects a broader…
first Jul 7, 2025 -
High max 7.5
Festo: CPX-CEC-C1 and CPX-CMXX, Missing Authentication for Critical Webpage Function
Unauthenticated access to critical webpage functions (e.g. reboot) may cause a denial of service of the device.
first Sep 20, 2022 -
High max 9.8
Weidmueller: Security routers IE-SR-2TX are affected by multiple vulnerabilities
Weidmueller security routers IE-SR-2TX are affected by multiple vulnerabilities (CVE-2025-41661, CVE-2025-41663, CVE-2025-41683, CVE-2025-41684, CVE-2025-41687). Weidmueller has released new firmware versions of the affected products to fix the vulnerabilitie…
first Jun 11, 2025 -
Critical max 9.8
Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered. **Update Version 1.1.0:** Updated the reporting credits for CVE-2025-25271.
first Jul 8, 2025 -
Critical max 7.2VDE-2025-058 8 CVEs
MB connect line: Multiple vulnerabilities in mbNET.mini
Multiple vulnerabilities in all mbNET.mini devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.
-
Critical max 7.2VDE-2025-059 8 CVEs
Helmholz: Multiple vulnerabilities in REX 100
Multiple vulnerabilities in all REX 100 devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.
-
Critical max 9.8
PHOENIX CONTACT: Security Advisory for multiple Industrial Controllers
Phoenix Contact Classic Line industrial controllers (ILC1x0 and ILC1x1 product families as well as the AXIOLINE controllers AXC1050 and AXC3050) are developed and designed for the use in closed industrial networks. The communication protocols used for device …
first Aug 7, 2019 -
Critical max 9.8
Festo: Controller CECC-S,LK,D family firmware 2.4.2.0 - multiple vulnerabilities in CODESYS V3 runtime system
The Festo controller CECC product family in firmware version 2.4.2.0 is affected by multiple vulnerabilities in the CODESYS V3 runtime.
first Jul 18, 2022 -
Critical max 8.8VDE-2025-054 4 CVEs
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, and security-…
-
Critical max 9.8VDE-2025-053 54 CVEs
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2025.0.2
-
High max 8.2VDE-2025-014 5 CVEs
Phoenix Contact: Security Advisory for CHARX SEC-3xxx charging controllers
Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered.
-
Critical max 10.0
WAGO: Vulnerability in WAGO Device Sphere
During installation, identical certificates are installed across all systems instead of unique ones, which are intended for JWT Token encryption and signing.
first Jun 23, 2025 -
Critical max 9.8PPSA-2025-003 1 CVE
Pilz: Authentication Bypass in IndustrialPI Webstatus
The Pilz industrial PC IndustrialPI webstatus application is vulnerable to an authentication bypass.