Advisories

Für CVSS 2.0, 3.0 und 3.2
VDE-2026-032
April 21, 2026, 9:00 vorm.
The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.
VDE-2026-003
April 1, 2026, 1:00 nachm.
Multiple Endress+Hauser devices are prone to vulnerabilities found in e!Runtime and the CODESYS V3 framework.
VDE-2026-002
März 2, 2026, 8:00 vorm.
A vulnerability has been identified in WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser.
VDE-2025-105
Dez. 8, 2025, 10:00 vorm.
A vulnerability in Wibu-Systems CodeMeter (up to version 7.60b) affects multiple Endress+Hauser products. This flaw can lead to a heap buffer overflow, which may allow remote code execution under certain …
VDE-2025-107
Dez. 5, 2025, 12:00 nachm.
Multiple vulnerabilities in a Qualcomm component have been reported in a closed-source report. This component is an integral part of the radio chip found in several Endress+Hauser products.
VDE-2025-068
Feb. 20, 2026, 10:00 vorm.
A privilege escalation vulnerability has been identified in Endress+Hauser's Proline 10 devices. This flaw allows an authenticated user with Operator-level access to elevate their privileges and gain Maintenance-level access, potentially …
VDE-2025-036
März 6, 2025, 3:00 nachm.
Several vulnerabilities in the Endress+Hauser MEAC300-FNADE4 were discovered, that can be accessed via Ethernet.
VDE-2024-054
Mai 22, 2025, 3:03 nachm.
Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the …