Advisories

Für CVSS 2.0, 3.0 und 3.2
VDE-2025-047
Juni 10, 2025, 12:00 nachm.

AUMA: Incorrect delivery status of the Bluetooth configuration

For actuators with AC.2 controls and PROFOX actuators, a wrong configuration occurred for deliveries within the period from 01.01.2024 to 09.05.2025. Despite the ordered option "L90.00 = Bluetooth always deactivated", …
CVE-2025-41657
VDE-2025-026
Mai 14, 2025, 3:00 nachm.

AUMA Riester: Buffer overflow in service telegram

Sending too much data in the service telegram of AUMA actuators leads to a buffer overflow in the actuator controls. Depending on the actuator, the service telegram is transmitted either …
CVE-2025-3496
VDE-2023-028
Mai 14, 2025, 3:00 nachm.

AUMA: SIMA Master Station affected by WRECK vulnerability

Forescout Research Labs, partnering with JSOF Research, disclosed NAME:WRECK, a set of Domain Name System (DNS) vulnerabilities that have the potential to cause either Denial of Service (DoS) or Remote …
CVE-2016-20009
VDE-2023-027
Aug. 7, 2023, 11:35 vorm.

AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations

A reflected cross-site scripting vulnerability exists in the System Diagnostics Manager (SDM) component of SIMA² Master Stations.
CVE-2022-4286
VDE-2022-032
Aug. 9, 2022, 10:00 vorm.

AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service

The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include …
CVE-2015-7705
CVE-2015-7853
CVE-2018-7183
CVE-2018-12327
CVE-2015-7871
CVE-2017-6460
CVE-2017-6458
CVE-2015-7854
CVE-2015-7849
CVE-2017-6462
CVE-2017-6451
CVE-2015-7974
CVE-2016-4957
CVE-2016-7426
CVE-2015-7703
CVE-2015-5300
CVE-2015-7701
CVE-2020-11868
CVE-2019-8936
CVE-2018-7185
CVE-2018-7184
CVE-2018-7182
CVE-2016-7434
CVE-2016-4954
CVE-2016-4953
CVE-2015-7979
CVE-2015-7978
CVE-2015-7704
CVE-2015-7692
CVE-2015-7691
CVE-2020-13817
CVE-2016-1548
CVE-2016-1549
CVE-2017-6464
CVE-2017-6463
CVE-2016-9310
CVE-2015-7973
CVE-2015-7855
CVE-2015-7851
CVE-2015-7850
CVE-2015-7702
CVE-2015-7975
CVE-2016-2519
CVE-2016-9311
CVE-2016-4955
CVE-2015-8158
CVE-2015-7977
CVE-2015-7852
CVE-2016-2516
CVE-2016-4956
CVE-2018-8956
CVE-2016-7433
CVE-2016-7431
CVE-2016-2518
CVE-2016-2517
CVE-2016-1550
CVE-2016-1547
CVE-2015-8139
CVE-2015-8138
CVE-2020-15025
CVE-2015-8140
CVE-2016-7428
CVE-2016-7427
CVE-2015-7976
CVE-2016-1551
CVE-2016-7429
CVE-2014-9750
CVE-2014-9296
CVE-2014-9295
CVE-2014-9294
CVE-2014-9293
CVE-2013-5211
CVE-2009-3563
VDE-2022-024
Mai 14, 2025, 3:00 nachm.

Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver

Improper buffer restrictions in the webserver used in SIMA² Master Station software versions < V 2.6 may allow an unauthenticated network-based attacker to stop the cyclic program on the device …
CVE-2021-22275