Description
Due to the improper neutralization of special elements used in a name parameter a low privileged remote attacker can exploit a command injection vulnerability in the Managed Ethernet Switch, resulting in full system compromise.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| TURCK | TBEN-LL-SE-M2 | 0.0.0 – ≤ 2.0.6.0 | — |
| TURCK | TBEN-L4-SE-M2 | 0.0.0 – ≤ 2.0.6.0 | — |
| TURCK | TBEN-L5-SE-M2 | 0.0.0 – ≤ 2.0.6.0 | — |
Advisories 1
- VDE-2026-038 TURCK: Multiple Vulnerabilities in Managed Ethernet Switches CERT@VDE · Jun 16, 2026