Description
An unauthenticated remote attacker can change the admin password in a moneo appliance due to weak password recovery mechanism.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ifm | moneo appliance QVA200 | 0.0 – ≤ 1.13 | — |
| ifm | moneo appliance QHA210 | 0.0 – ≤ 1.13 | — |
| ifm | moneo appliance QHA300 | 0.0 – ≤ 1.13 | — |
| ifm | moneo for Micosoft Windows | 0.0 – ≤ 1.13 | — |
Advisories 1
- VDE-2024-028 ifm moneo password reset can be exploited CERT@VDE · Jan 15, 2026