Advisories

Für CVSS 2.0, 3.0 und 3.2
VDE-2024-071
Mai 22, 2025, 3:03 nachm.
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
VDE-2024-067
Mai 14, 2025, 3:00 nachm.
Vulnerabilities in .NET and Visual Studio functions System.Text.Json, System.Formats.Asn1, OPCFoundation.NetStandard.Opc.Ua.Core allow an remote attacker to execute a Denial-of-Servce attack.
VDE-2024-051
Mai 14, 2025, 3:00 nachm.
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
VDE-2024-039
Aug. 27, 2025, 12:00 nachm.
Confidential data in HTTP query string of user requests. Incomplete sanitation of user input in administrative web interface.
VDE-2024-052
Mai 14, 2025, 3:00 nachm.
The pathfinder TCP encapsulation service is vulnerable to a drain of open file descriptors.
VDE-2024-022
Aug. 27, 2025, 12:00 nachm.
Start sequence for firewall service allows attack during the boot process. Password is reset to default when the device undergoes a firmware upgrade.
VDE-2024-029
Juni 11, 2024, 8:00 vorm.
The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.
VDE-2024-019
Mai 14, 2024, 8:00 vorm.
Multiple vulnerabilities have been discovered in the Firmware of CHARX SEC charge controllers. Update: credis have been updated