Description
Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LENZE | cabinet c520 | V01.07.00.2757 – < V01.08.01.3021 | V01.08.01.3021 |
| LENZE | cabinet c550 | V01.07.00.2757 – < V01.08.01.3021 | V01.08.01.3021 |
| LENZE | cabinet c750 | V01.07.00.2757 – < V01.08.01.3021 | V01.08.01.3021 |
Advisories 1
- VDE-2022-030 Lenze: Vulnerability in the OPC-UA authentification connection in the firmware CERT@VDE · Jul 11, 2022