541 results · Feed
-
High max 7.5
HIMA: Multiple products affected by DoS and Port-Based-VLAN Crossing
CVE-2024-24781: If the above mentioned products are loaded with Wire speed (1Gbit/s or 100Mbit/s) the resources of the Ethernet-Controller are exhausted and it must be reset by the system automatically after load disappears. This leads to an interruption (DoS…
first Feb 13, 2024 -
High max 7.8
HIMA: unquoted path vulnerabilities in X-OPC and X-OTS
Unquoted Windows search path vulnerability in the below mentioned Software for Windows might allow local users to gain privileges via a malicious .exe file.
first Jan 16, 2023 -
Critical max 9.8
Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally…
first Oct 21, 2024 -
Medium max 5.3
Beckhoff: EtherLeak in TwinCAT RT network driver
Beckhoff's TwinCAT RT network driver for Intel 8254x and 8255x is providing EtherCAT functionality. The driver implements real-time features. Except for Ethernet frames sent from real-time functionality, all other Ethernet frames sent through the driver are n…
first Jun 16, 2020 -
Medium max 5.5
Beckhoff: Denial-of-Service vulnerability in the IPC-Diagnostics package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, a user can post s…
first Aug 27, 2024 -
Medium max 4.7
Beckhoff: Open redirect in TwinCAT/BSD package authelia-bhf
With TwinCAT/BSD based products the HTTPS request to the Authelia login page accepts user-controlled input that specifies a link to an external site.
first Dec 13, 2023 -
High max 7.8
Beckhoff: Local authentication bypass in IPC-Diagnostics package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, the authenticatio…
first Aug 27, 2024 -
High
Beckhoff: BK9000 couplers - Denial of service inhibits function
The coupler's function could be inhibited by an attack.
first Mar 10, 2020 -
Medium max 7.3
Beckhoff: Denial-of-Service vulnerability in the MDP package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, a user can post s…
first Aug 27, 2024 -
High
Beckhoff: Stack Overflow and XXE vulnerability in various OPC UA products
The affected products can act as OPC UA client or server and are vulnerable to two different kind of attacks via the OPC UA protocol. For both cases the attacker can send packets via the OPC UA protocol without the need to authenticate and 1. provoke a stack …
first Oct 21, 2024 -
High max 7.3
Beckhoff: Improper neutralization of input in IPC-Diagnostics-www package included in TwinCAT/BSD operating system
By default, TwinCAT/BSD-based products have a device-specific web interface for web-based management (WBM) enabled, developed by Beckhoff and known as Beckhoff Device Manager UI. It can be accessed remotely or locally. When accessed locally, the user can bypa…
first Aug 27, 2024 -
High max 7.3
Beckhoff: Privilege Escalation through TwinCat System Tray (TcSysUI.exe)
The default installation path and its permissions for the TwinCAT runtime allow a local user to replace or modify executables other users of the same system might execute. The issue does not apply for installations underneath C:\Program Files.
first Nov 19, 2020 -
Medium max 6.5
Beckhoff: Relative path traversal vulnerability through TwinCAT OPC UA Server
Through specific nodes of the server configuration interface of the TwinCAT OPC UA Server administrators are able to remotely create and delete any files on the system which the server is running on, though this access should have been restricted to specific …
first Nov 4, 2021 -
High max 8.6
ADS-TEC Industrial IT: Docker vulnerability affects multiple products
The affected products and versions present a vulnerability due to a vulnerable integrated software component the docker runc <= 1.1.11. In the worst-case scenario, the integrated Docker container environment could be compromised, potentially enabling the exec…
first Feb 19, 2024 -
High max 7.5VDE-2025-041 1 CVE
Weidmueller: ResMa is affected by a Vulnerability for ASP.NET AJAX
Weidmueller product ResMa is affected by ASP.NET AJAX vulnerability. Weidmueller has released a new firmware for the affected product to fix the vulnerability.
-
Low
Pepperl+Fuchs: Kr00k vulnerabilities in Broadcom Wi-Fi chipsets
Security researchers at ESET have reported a vulnerability called Kr00k (CVE-2019- 15126) which affects encrypted WiFi traffic for devices using Broadcom or Cypress chipsets. The vulnerability may allow an attacker to decrypt some WPA2- Personal/Enterprise tr…
first Mar 31, 2020 -
High max 7.1
PEPPERL+FUCHS: Device Master ICDM-RX/* – Vulnerability may allow unauthenticated remote attacker information disclosure and denial of service
Vulnerabilities have been discovered in the product, mainly caused by HTML injection and crosssite-scripting. The impact of the vulnerability on the affected device may result in an information disclosure and denial of service.
first Aug 13, 2024 -
High max 9.8
Weidmueller: Authentication Vulnerability in PROCON-WIN 5
Weidmüller product PROCON-WIN is affected by hard-coded credentials. Weidmüller has released a new version of the affected product to fix the vulnerability.
first Mar 5, 2025 -
High max 8.8
Weidmueller: Multiple vulnerabilities in Industrial WLAN devices
Multiple issues in Weidmueller Industrial WLAN devices have been found. Initial publication date: 2021-06-23 Update A publication date: 2021-07-02 Update A CVE-2021-33534 CVSS: 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Description: An exploitable com…
first Jun 23, 2021 -
High max 8.8
WAGO: Vulnerabilities in CODESYS Control
The following firmware versions installed on several devices are are vulnerable due to a vulnerability in CODESYS Control.
first Feb 4, 2025 -
Critical max 9.8
WAGO: Multiple Vulnerabilities in I/O-Check Service
Multiple vulnerabilities in the WAGO I/O-Check Service were reported.
first Jun 29, 2021 -
High max 8.1
PHOENIX CONTACT: Multiple vulnerabilities in ENERGY AXC PU
Multiple vulnerabilities have been discovered in CODESYS Control V3 runtime system. For details regarding the single vulnerabilities please refer to the security advisories issued by CODESYS: - CODESYS Security Advisory 2022-02 - CODESYS Security Advisory 202…
first Mar 14, 2023 -
High max 8.1
PHOENIX CONTACT: Profinet SDK libexpat vulnerabilities
Two vulnerabilities have been discovered in the Expat XML parser library (aka libexpat). This open-source component is widely used in a lot of products worldwide. An attacker could cause a program to crash, use unexpected values or execute code by exploiting …
first Dec 13, 2022 -
High max 7.2
PHOENIX CONTACT: Advisory for TC ROUTER and CLOUD CLIENT
Two Vulnerabilities have been discovered in TC ROUTER 4000 series and CLOUD CLIENT 2000 series up to firmware version 4.5.7x.107. The web administration interface is vulnerable for authenticated admin users to path traversals, which could lead to arbitrary fi…
first Mar 7, 2023 -
High max 7.8
PHOENIX CONTACT: Automationworx BCP File Parsing Vulnerabilities
Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker needs to get access to an original bus configuration file (*.bcp) to …
first Nov 15, 2022 -
Unscored max 10.0
PHOENIX CONTACT: Missing Authentication in ProConOS/ProConOS eCLR SDK and MULTIPROG Engineering tool
ProConOS/ProConOS eCLR designed for use in closed industrial networks provide communication protocols without authentication. Please also refer the original ICS-CERT advisory ICSA-15-013-03 published 13 January 2015.
first Jun 21, 2022 -
High max 7.5
PHOENIX CONTACT: Multiple products affected by possible infinite loop within OpenSSL library
FL MGUARD and TC MGUARD devices are affected by a possible infinite loop within a OpenSSL library method for parsing elliptic curve parameters. This method is used on parsing cryptographic certificates that contain elliptic curve public keys in compressed for…
first Apr 12, 2022 -
Critical
Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 has a Stack-based Buffer Overflow
An attacker may insert a carefully crafted cookie into a GET menu_pxc.cgi or GET index.cgi request to cause a buffer overflow that can initiate a Denial of Service attack and execute arbitrary code.
first May 16, 2018 -
Critical max 8.8
PHOENIX CONTACT: Multiple Vulnerabilities in FL SWITCH 3xxx, 4xxx and 48xx
Multiple vulnerabilities for FL SWITCH have been identified in PHOENIX CONTACT FL SWITCH 3xxx, 4xxx, 48xx version 1.0 to 1.34.
first Jan 23, 2019 -
High max 7.5
Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerability has been discovered in the utilized component PROFINET IO Device by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerability on the affected device is that it can - no longer perform acyclic requests - may drop al…
first Nov 16, 2021 -
Critical
Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerability has been discovered in the utilized component 499ES EtherNet/IP Stack by Real Time Automation (RTA).
first Feb 15, 2021 -
Critical max 4.6
Miele: Multiple Vulnerabilities in XGW 3000 ZigBee Gateway
Miele XGW 3000 is a ZigBee-TCP/IP gateway. The gateway connects Miele ZigBee-Appliances (called Miele@home) with local customer TCP/IP-Network and allows visualizing the appliance state on the web interface of the gateway, Miele SuperVision capable appliance,…
first May 20, 2019 -
Critical max 9.8
Helmholz: Privilege Escalation in shDialup (Update A)
Multiple Vulnerabilities in a software service of shDIALUP can lead to arbitrary code execution due to improper privilege management. Update A, 2022-03-28 Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability
first Mar 28, 2021 -
High max 7.8
CODESYS: Development System V2.3 affected by two vulnerabilities through corrupted project files
Local attackers can cause affected CODESYS Development System V2.3 installations to crash or execute code by opening malicious project files. The CODESYS Development System V2.3 is an IEC 61131-3 programming tool for the industrial controller and automation t…
first May 6, 2024 -
High max 8.6
Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver
Improper buffer restrictions in the webserver used in SIMA² Master Station software versions < V 2.6 may allow an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.
first Jun 15, 2022 -
Critical
AUMA: SIMA Master Station affected by WRECK vulnerability
Forescout Research Labs, partnering with JSOF Research, disclosed NAME:WRECK, a set of Domain Name System (DNS) vulnerabilities that have the potential to cause either Denial of Service (DoS) or Remote Code Execution, allowing attackers to take targeted devic…
first Aug 7, 2023 -
High max 8.0
Wiesemann & Theis multiple products prone to web interface vulnerability
Multiple Wiesemann & Theis product families are affected by a vulnerability in the web interface. The device allows an unauthenticated attacker to get the session ID of a logged in user. He may then spoof his IP address to act as the logged in user.
first Dec 13, 2022 -
High
Weidmueller: Remote I/O fieldbus couplers (IP20) affected by INFRA:HALT vulnerabilities
The Weidmueller Remote I/O (IP20) fieldbus couplers (u-remote) are affected by several vulnerabilities of the third-party TCP/IP Niche stack. An attacker may use crafted IP packets to cause a denial of service or breach of integrity of the affected products. …
first Oct 18, 2021 -
High max 9.8
WAGO: Web-Based Management Authentication Vulnerability in WAGO 750-36X and WAGO 750-8XX
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to read and write some special parameters without authentication. This vu…
first Aug 31, 2021 -
High max 7.5
WAGO: PLC families 750-88x and 750-352 prone to DoS attack, versions < FW10 (Update A)
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. Older firmware versions of the PLC family 750-88x and 750-352 are vulnerable for a special denial of service attack. A…
first Oct 27, 2020