541 results · Feed
-
Medium
WAGO: XSS vulnerability in Web-UI in WAGO 750-88X and WAGO 750-89X
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The SNMP configuration page of the device is vulnerable for a persistent XSS (Cross-Site Scripting) attack.
first Sep 30, 2020 -
Critical max 9.1
WAGO: Authentication Bypass Vulnerability in WAGO 750-36X and WAGO 750-8XX Version <= FW03
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. With special crafted requests it is possible to change some special parameters without authentication.
first Sep 30, 2020 -
High
WAGO: e!Cockpit cleartext communication and hardcoded key
The communication between e!Cockpit and the programmable logic controller is not encrypted. The broken cryptographic algorithm allows an attacker to decode the password for the e!Cockpit communication and with this to manipulate the application. The password …
first Mar 9, 2020 -
High max 8.6
SMA: Sunny Portal demo system privilege escalation
A security researcher discovered a privilege escalation vulnerability in the demo system area of the SMA Classic Portal, www.sunnyportal.com. Only systems of other users have been affected who unintendedly and illicitly had added their non-demo systems to the…
first May 13, 2025 -
Critical
Pilz: Multiple products prone to Niche Ethernet Stack vulnerabilities
Multiple products of PILZ utilise a third-party TCP/IP implementation - the "Niche Ethernet Stack". This TCP/IP stack contains multiple vulnerabilities which are therefore affecting the products listed above.
first Sep 20, 2021 -
Medium max 4.2
Phoenix Contact: Security Advisory for ESL Stick USB-A
A vulnerability has been found in a cryptographic library of Infineon Technologies that is part of the firmware of the CmDongles. The exploitation of this vulnerability has been classified as complex: potential attackers need physical access and require speci…
first Jan 14, 2025 -
High max 8.8
Phoenix Contact: Security Advisory for CHARX-SEC3xxx Charge controllers
Improper file permission handling allows an authenticated low privileged user to gain root access.
first Jan 14, 2025 -
High max 7.5
Phoenix Contact: Multiple Vulnerabilities in PLCnext Engineer
Vulnerabilities in .NET and Visual Studio functions System.Text.Json, System.Formats.Asn1, OPCFoundation.NetStandard.Opc.Ua.Core allow an remote attacker to execute a Denial-of-Servce attack.
first Oct 8, 2024 -
Medium max 5.3
Phoenix Contact: Multiple mGuard devices are vulnerable to a drain of open file descriptors.
The pathfinder TCP encapsulation service is vulnerable to a drain of open file descriptors.
first Sep 10, 2024 -
High max 8.1
Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
first Sep 10, 2024 -
Medium max 5.9
PHOENIX CONTACT: FL MGUARD affected by two vulnerabilities
The FL MGUARD family of devices is affected by two vulnerabilities.
first Jun 13, 2023 -
High max 8.8
PHOENIX CONTACT: FL SWITCH 2xxx series incorrect privilege assignment
The user management of the FL SWITCH 2xxx family of devices implements access rights based on roles and permission groups. An unprivileged user logged in via the SSH CLI is assigned to the admin role independent of his configured access role enabling full acc…
first Jan 25, 2022 -
High max 7.5
PHOENIX CONTACT: Security Advisory for ILC1x1 Industrial controllers
Phoenix Contact Classic Line industrial controllers are developed and designed for the use in closed industrial networks. The communication protocols and device access do not feature authentication measures. Remote attackers can use specially crafted IP packe…
first Jun 23, 2021 -
Critical max 10.0
PHOENIX CONTACT: Multiple Vulnerabilities in MEVIEW3
Multiple vulnerabilities for MEVIEW3 have been identified in PHOENIX CONTACT MEVIEW3, versions below 3.14.25 and 3.15.18
first Mar 5, 2019 -
Critical
PHOENIX CONTACT: FL SWITCH 3xxx/4xxx/48xx series web-service authentication bypass
PHOENIX CONTACT FL SWITCH 3xxx series, FL SWITCH 4xxx series, and FL SWITCH 48xx series products running firmware version 1.0 to 1.32 allow unauthenticated users with network access to gain administrative privileges (CVE-2017-16743) and expose information to …
first Jan 10, 2018 -
Critical max 9.8
Pepperl+Fuchs: Multiple VDM100-Distance Ethernet-IP sensors with multiple vulnerabilities
Critical vulnerabilities have been discovered in the utilized component TRECK TCP/IP Stack by Digi International Inc. For more information see advisory by Digi International Inc.: Digi International Security Notice - TRECK TCP/IP Stack "RIPPLE20" VU#257161 IC…
first Aug 16, 2021 -
Critical max 9.8
Pepperl+Fuchs: WirelessHART-Gateway - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerabilities have been discovered in the product and in the utilized components jQuery by jQuery Team and TLS Version 1.0/1.1. The impact of the vulnerabilities on the affected device may result in - denial of service - remote code execution - cod…
first Oct 16, 2021 -
Medium
Pepperl+Fuchs: Path traversal in WirelessHART Gateway
Pepperl+Fuchs analyzed WirelessHART-Gateways in respect of a critical vulnerability within the Firmware. An attacker may exploit this vulnerability to get access to files and access restricted directories that are stored on the device by manipulating file par…
first Mar 6, 2019 -
High max 8.8
Pepperl+Fuchs: Multiple vulnerabilites in Comtrol IO-Link Master
Several vulnerabilities exist within firmware versions up to and including v1.5.48.
first Jan 4, 2021 -
High max 8.8
MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24
Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3.
first May 15, 2023 -
Critical max 9.1
Helmholz: Vulnerabilities in myREX24 V2/myREX24.virtual
The data24 service that is bundled with every installation of myREX24 V2/myREX24.virtual has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.
first Mar 18, 2025 -
High max 7.5
Helmholz: Remote user enumeration in myREX24/myREX24-virtual
An issue was discovered in the myREX24 and myREX24-virtual software in all versions through V2.9.0.
first Dec 8, 2021 -
Medium max 5.3
Helmholz: Unauthenticated user enumeration in myREX24 and myREX24.virtual
An issue was discovered in myREX24 and myREX24.virtual in all versions through 2.11.2.
first Sep 7, 2022 -
Critical
Endress+Hauser: Multiple products prone to WIBU CodeMeter vulnerabilities
For further Information please refer to WIBU Advisories directly at https://wibu.com/support/security-advisories.html and the aforementioned CVE-IDs.
first Oct 27, 2020 -
Critical max 5.6
Endress+Hauser: Multiple products affected by log4net vulnerability
Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.
first Jan 20, 2022 -
Medium max 6.5
Endress+Hauser: Ecograph T utilizing Webserver firmware version 2.x exposes sensitive information
The firmware release has a dynamic token for each request submitted to the server, which makes repeating requests and analysis complex enough. Nevertheless, it's possible and during the analysis it was discovered that it also has an issue with the access-cont…
first Nov 19, 2020 -
High max 7.3
Endress+Hauser: Multiple Devices affected by fdtContainer vulnerability
The fdtCONTAINER component is integrated into an application (host application). The fdtCONTAINER application is a specific host application which integrates the fdtCONTAINER component. The fdtCONTAINER component exchanges binary data blobs with such a host a…
first Mar 1, 2021 -
High max 7.5
CODESYS: Vulnerability can cause a DoS on CODESYS OPC UA products
The CODESYS OPC UA stack of the CODESYS Control runtime system may incorrectly calculate the required buffer size for received requests/responses. This can lead to a crash of the CODESYS runtime system during the subsequent initialization of the receive buffe…
first Jun 4, 2024 -
High max 7.8
CODESYS: Vulnerability in multiple products through exposure of resource to wrong sphere
All legitimate local Microsoft Windows users can read or modify files that are located in the working directory of the affected CODESYS products, even if they are executed under a different user or in the system context.
first Jun 4, 2024 -
Critical max 9.8
TECSON/GOK: Improper Authentication and Access Control on multiple devices
A security researcher discovered that the affected application doesn't properly restrict access to an endpoint that is responsible for saving settings, to a user with limited access rights. Based on the lack of adequately implemented access-control rules, by …
first Jun 4, 2019 -
High max 7.5
Beckhoff: TwinCAT Denial-of-Service in Profinet driver
In case TwinCAT is configured to use the Profinet driver, a denial of service of the controller could be reached by sending special packets to the device.
first Oct 9, 2019 -
High max 7.5
AUMA Riester: Buffer overflow in service telegram
Sending too much data in the service telegram of AUMA actuators leads to a buffer overflow in the actuator controls. Depending on the actuator, the service telegram is transmitted either via Bluetooth or RS232
first May 12, 2025 -
High max 7.5
WAGO: OpenSSL DoS Vulnerability in PLCs
WAGO controllers have always been designed for easy connection to IT infrastructure. Even controllers from legacy product lines support encryption standards to ensure secure communication. With special crafted requests it is possible to bring the device out o…
first Aug 31, 2021 -
Critical max 10.0
WAGO: Command Injection Vulnerability in I/O-Check Service of multiple products
The reported vulnerability allows an attacker who has network access to the device to execute code with specially crafted packets.
first Dec 17, 2020 -
Critical
WAGO: Cloud Connectivity Multiple Vulnerabilities
The Cloud Connectivity of the WAGO PLCs is used to connect the device with the cloud services from different providers. It also supports maintenance functionality with the firmware update function from the WAGO cloud. An attacker needs an authorized login wit…
first Mar 9, 2020 -
High max 8.6
Pepperl+Fuchs: Multiple Products - Vulnerability may allow remote attackers to cause a Denial Of Service
Critical vulnerability has been discovered in the utilized component Ethernet IP Stack by Hilscher Gesellschaft für Systemautomation mbH. The impact of the vulnerability on the affected device is that it can denial of service remote code execution code exposu…
first Feb 16, 2021 -
High max 7.8
Wiesemann & Theis: Multiple products prone to unquoted search path
Multiple Wiesemann & Theis software products are affected by a vulnerability through an unquoted search path in the Windows registry. A local attacker can execute arbitrary code and gain administrative privileges by inserting an executable file in the path of…
first Feb 28, 2024 -
Critical
TRUMPF: Multiple products prone to WIBU CodeMeter vulnerabilities
A number of TRUMPF CAD/CAM software tools use the CodeMeter Runtime application from WIBU-SYSTEMS AG to manage licences. This application contains a number of vulnerabilities, which enable an attacker to prevent normal operation of CodeMeter, resulting in a D…
first Oct 27, 2020 -
Critical max 9.8
Welotec: Two vulnerabilities in TK500v1 router series
Welotec has closed two vulnerabilities in the TK500v1 router series and advises to update the routers to firmware version r5542 or later. An exploitation of the vulnerabilities can allow an attacker to manipulate the device.
first Apr 9, 2024 -
Critical
Weidmueller: u-create studio < 1.20.2 affected by WIBU-SYSTEMS CodeMeter vulnerabilities
WIBU-SYSTEMS report multiple vulnerabilities in their CodeMeter Runtime software. As part of the Weidmüller u-create studio installation the WIBU-SYSTEMS CodeMeter is installed by default. As the u-create studio installation bundle contains vulnerable version…
first Oct 12, 2020