541 results · Feed
-
High max 7.8
TRUMPF: Multiple products include a vulnerable version of Notepad++
The TRUMPF products that are listed above contain a vulnerable version of Notepad++. This version isbeing installed for support purposes only, so there is no danger of triggering this vulnerability inNotepad++ during normal operations. Nevertheless, TRUMPF re…
first Jan 23, 2024 -
Medium max 6.5
SMA: Sunny Portal Remote Code Execution
A security researcher discovered a critical Remote Code Execution vulnerability in sunnyportal.com. An attacker could upload code instead of an image and remotely execute this code.
first Feb 26, 2025 -
Critical max 9.8
Pilz: WIBU Vulnerabilitiy in multiple Products
Several Pilz products use the 3rd party component "CodeMeter Runtime" from WIBU-SYSTEM AG to manage software licenses. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software produc…
first Oct 12, 2023 -
High max 8.8
Pilz: Multiple products prone to libwebp vulnerability
Several Pilz products use the 3rd-party component 'libwebp' for decoding of images in WebP format. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software product. Depending on the …
first Dec 5, 2023 -
Medium max 6.5
Pilz: PAS 4000 prone to ZipSlip
PAS4000 is the software platform for the Automation System PSS 4000. PAS 4000 does not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.
first Nov 24, 2022 -
Critical max 8.8
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
first Dec 9, 2024 -
Critical max 9.8
Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
first Dec 9, 2024 -
High max 6.5
Phoenix Contact: PLCnext Control prone to download of code without integrity check
PLCnext Control provides authentication and integrity check for the application.An authenticated, skilled attacker might be able to manipulate the application (e.g.: logic files, executable logic, configurations) in a special crafted way that the integrity ch…
first Dec 12, 2023 -
High max 8.8
Phoenix Contact: PLCnext prone to Incorrect Permission Assignment for Critical Resource
PLCnext Control provides authentication and integrity check for the application.An authenticated, skilled attacker might be able to manipulate the application (e.g.: logic files, executable logic, configurations) in a special crafted way that the integrity ch…
first Dec 12, 2023 -
High max 7.5
Phoenix Contact: ProConOS prone to Download of Code Without Integrity Check
Increased Security attacks against OT infrastructure and research of Dragos makes it necessary to publish this advisory giving users hints according to basic security measures to support automation systems using existing devices based on ProConOS/ProConOS eCL…
first Dec 12, 2023 -
Critical max 9.8
Phoenix Contact: MULTIPROG Engineering tool and ProConOS eCLR SDK prone to CWE-732
Increased Security attacks against OT infrastructure and research of Dragos makes it necessary to publish this advisory giving users hints according to basic security measures to support automation systems using existing devices based on ProConOS/ProConOS eCL…
first Dec 12, 2023 -
Critical max 10.0
Phoenix Contact: Multiple vulnerabilities in WP 6xxx Web panels
Multiple vulnerabilities allow an attacker to read arbitrary files, inject commands and bypass authentication or access control. Furthermore, hardcoded session and encryption keys as well as a missing firmware update signature and a service running with unnec…
first Aug 8, 2023 -
Critical max 9.6
Phoenix Contact: Multiple vulnerabilities in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices
Two vulnerabilities have been discovered in the firmware of TC ROUTER and TC CLOUD CLIENT devices. Update A, 2024-08-12 Added a summary text Added details to impact
first Aug 8, 2023 -
Critical max 7.8
Phoenix Contact: PLCnext Engineer Vulnerabilities in LibGit2Sharp/LibGit2
Several vulnerabilities have been discovered in the LibGit2Sharp or underlying LibGit2 library.This open-source component is widely used in a lot of products worldwide.The product is vulnerable to remote code execution, privilege escalation and tampering.PLCn…
first Aug 8, 2023 -
High max 7.5
PHOENIX CONTACT: Denial-of-Service vulnerability in mGuard product family
A denial of service of the HTTPS management interface of PHOENIX CONTACT FL MGUARD and TC MGUARD devices can be triggered by a larger number of unauthenticated HTTPS connections originating from different source IP's. Configuring firewall limits for incoming …
first Nov 15, 2022 -
Critical max 9.8
PHOENIX CONTACT: Multiple Linux component vulnerabilities in PLCnext Firmware
UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control AXC F x152 is certified according to IEC 62…
first Nov 10, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerability in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
ProConOS/ProConOS eCLR insufficiently verifies uploaded data.
first Jun 21, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerability in classic line industrial controllers
The affected devices insufficiently verify uploaded data.
first Jun 21, 2022 -
Critical
PHOENIX CONTACT: mGuard Device Manager affected by HTTP Request Smuggling of Apache Webserver
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling. For the mGuard Device Manager only the mdm Installer for Windows is affected.
first Apr 12, 2022 -
Critical max 9.8
PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release
PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities. Firmware components in version 2021.06 had …
first Apr 12, 2022 -
Critical max 7.3
PHOENIX CONTACT: Path Traversal in Library of PLCnext Technology Toolchain and FL Network Manager
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file write that may lead to code execution. The vulnerability …
first Mar 22, 2022 -
Critical max 9.8
PHOENIX CONTACT: Vulnerabilities in XML parser library Expat (libexpat)
Several vulnerabilities have been discovered in the Expat XML parser library (aka libexpat).This open-source component is widely used in a lot of products worldwide.A remote, anonymous attacker could use an integer overflow to execute arbitrary program code w…
first Mar 30, 2022 -
Critical max 8.2
PHOENIX CONTACT: BLUEMARK X1 / LED / CLED printers utilizing the Siemens Nucleus RTOS TCP/IP Stack
The TCP/IP stack and of the networking component (Nucleus NET) in Nucleus Real-Time Operating System (RTOS) contain several vulnerabilities. Nucleus NET is utilized by BLUEMARK X1 / LED / CLED. The abovementioned BLUEMARK printers are discontinued and only im…
first Jan 11, 2022 -
Critical max 9.1
WAGO: Multiple Vulnerabilities in CODESYS Runtime 2.3 and WebVisualisation
Multiple vulnerabilities were reported in CODESYS 2.3 Runtime. The CODESYS 2.3 Runtime is an essential component in several WAGO PLCs. All vulnerable PLCs are listed in chapter 'Affected Products'. https://www.codesys.com/security/security-reports.html
first Nov 16, 2021 -
High max 7.8
PHOENIX CONTACT: PC Worx/-Express prone to improper input validation vulnerability
PC Worx / -Express is vulnerable to a 'zip slip' style vulnerability when loading a project file.
first Nov 3, 2021 -
High
PHOENIX CONTACT: Local Privilege Escalation in PC WORX SRT
The Phoenix Contact application 'PC WORX SRT' is installed as service. The installation path of the application is configured to have insecure permissions which allows any unprivileged user to write arbitrary files to the installation directory where all the …
first Mar 27, 2020 -
Critical
PHOENIX CONTACT: mGuard device manager (mdm) multiple vulnerabilities in Java SE
Multiple security issues and vulnerabilities in Oracle Java SE possibly affecting mGuard device manager (mdm / FL MGUARD DM) 1.8.0 and older.
first Sep 7, 2017 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series - Stack-based Buffer Overflow in shared object file
An attacker may exploit a 'long cookie' related vulnerability to cause a buffer overflow that allows unauthorized access to the switches operating system files. The attacker can then insert executable code into the OS.
first May 16, 2018 -
High max 7.5
PHOENIX CONTACT: FL MGUARD DM version 1.12.0 and 1.13.0 Improper Privilege Management
Access to the Apache web server being installed as part of the FL MGUARD DM on Microsoft Windows does not require login credentials even if configured during installation.
first Aug 11, 2021 -
Critical
PHOENIX CONTACT: Emalytics Controller ILC 2050 BI(L) allows unauthorised read and write access to the configuration file
Phoenix Contact Emalytics Controller ILC 2050 BI are developed and designed for the use in protected building automation networks.An issue was discovered on Phoenix Contact Emalytics Controller ILC 2050 BI before 1.2.3 and BI-L before 1.2.3 devices. There is …
first Feb 17, 2020 -
High
PHOENIX CONTACT: improper access control exists on FL NAT devices when using MAC-based port security
If MAC-based port security or 802.1x port security is enabled, the FL NAT 2xxx will unintentionally grant access to unauthorized devices in case of routed transmission. ''' Subnet 2---(Ports belonging to subnet 2) | FL NAT 2xxx | (Ports belonging to subnet 1,…
first Oct 29, 2019 -
Critical
PHOENIX CONTACT: Niche Ethernet Stack for ILC1x0, ILC1x1 and AXC 1050 Industrial controllers and CHARX control DC
Third party Niche Ethernet stack has several vulnerabilities announced by the security researcher's community. Phoenix Contact Classic Line industrial controllers are developed and designed for the use in closed industrial networks. The communication protocol…
first Aug 4, 2021 -
Critical max 9.8
PHOENIX CONTACT: Multiple Vulnerabilities in AXC F 2152
Multiple vulnerabilities have been identified in PHOENIX CONTACT AXC F 2152 with firmware versions 1.x
first Jun 4, 2019 -
Medium
PHOENIX CONTACT: mGuard IKE daemon remote denial of service
Openswan 2.6.39 and earlier, which is used in the mGuard firmware version 8.0.0 to 8.5.1, allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.
first Mar 7, 2017 -
Medium
PHOENIX CONTACT: Denial-of-Service vulnerabilty in Emalytics, ILC 2050 BI and ILC 2050 BI-L
A timeout during a TLS handshake can result in the connection failing to terminate. This can result in a Niagara thread hanging and requires a manual restart to correct.
first Aug 20, 2020 -
Critical max 9.8
PEPPERL+FUCHS: HMI – devices are affected by Windows RCE
An unauthenticated attacker could repeatedly send IPv6 packets, that include specially crafted packets, to a Windows machine which could enable remote code execution.
first Feb 25, 2025 -
Critical max 9.8
Pepperl+Fuchs: Multiple DTM and VisuNet Software affected by log4net vulnerability
Critical vulnerabilities have been discovered in the utilized component log4net by Apache Software Foundation. UPDATE A: Remediation: added fixed VisuNet Products
first Oct 26, 2021 -
Critical max 9.8
Pepperl+Fuchs: Comtrol RocketLinx ICRL-M - Multiple Vulnerabilities
Several critical vulnerabilities within firmware.
first Mar 8, 2021 -
High
Pepperl+Fuchs, PACTware: Two password vulnerabilities found
PACTware passwords are stored in a recoverable format (CVE-2020-9403) PACTware passwords may be modified without knowing the current password (CVE-2020-9404)
first May 29, 2020 -
High
Pepperl+Fuchs: RSM-EX devices - Multiple Bluetooth vulnerabilities
Critical vulnerabilities have been discovered in the utilized Bluetooth component. For more information see: https://kb.cert.org/vuls/id/799380
first May 16, 2022