VDE-2021-040
Mai 14, 2025, 2:28 nachm.
Promass 83 devices utilizing 499ES EtherNet/IP (ENIP) Stack by Real Time Automation (RTA) are vulnerable to a stack-based buffer overflow. Update A, 2021-10-07: added credits changed title from "ENDRESS+HAUSER: Promass …
VDE-2021-012
Mai 14, 2025, 2:28 nachm.
Multiple issues have been identified in dnsmasq < 2.83
VDE-2025-009
Mai 14, 2025, 2:28 nachm.
Several WAGO Firmwares are vulnerable to an incorrect calculation of the buffer size in the CODESYS OPC UA STACK. This can lead to a crash of the runtime of the …
VDE-2020-035
Mai 14, 2025, 2:28 nachm.
Multiples issues exist in mymbCONNECT24 and mbCONNECT24
VDE-2021-010
Mai 14, 2025, 2:28 nachm.
Endress+Hauser products utilizing WPA2 are vulnerable to KRACK attacks. Proline portfolio is a flow meter with an optional WLAN interface in the display. The flowmeters are only affected if the …
VDE-2018-004
Mai 14, 2025, 2:28 nachm.
An attacker with permission to transfer configuration files to/from the switch or permission to upgrade firmware, is able to execute arbitrary OS shell commands. CGI applications config_transfer.cgi and software_update.cgi are …
VDE-2018-016
Mai 14, 2025, 2:28 nachm.
An attacker may gain access (by elevated privileges) to CT50-Ex mobile computers through a vulnerability in a system service running the Android Operating System (OS). The system service improperly validates …
VDE-2019-016
Mai 14, 2025, 2:28 nachm.
Manipulated PC Worx or Config+ projects could lead to a remote code execution due to insufficient input data validation. The attacker needs to get access to an original PC Worx …