Filter anzeigen
filter
Zeige nur:
Advisory
VDE-2020-006
14.05.2025 14:28
With special crafted requests it is possible to get sensitive information, in this case the password hashes, by measuring response delay. With a substantial amount of time this data can …
Advisory
VDE-2020-015
10.06.2020 10:00
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. An attacker needs an authorized login with administrative privileges on the device …
Advisory
VDE-2018-013
22.09.2025 12:00
The 750-8xx controller are susceptible to a Denial-of-Service attack due to a flood of network packets. Please consult the original paper for details (link at the bottom of this advisory).
Advisory
VDE-2022-047
12.10.2022 10:00
The FTP server does not properly release memory resources that were reserved for incomplete connection attempts by FTP clients. This could allow a remote attacker to generate a denial of …
Advisory
VDE-2020-007
09.03.2020 10:10
The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for commissioning and update. The controller is an embedded device which has limited resources. The vulnerability described …
Advisory
VDE-2020-010
09.03.2020 10:25
An attacker needs an authorized login with administrative privileges on the device in order to exploit the herein mentioned vulnerability. The weakness allows an attacker which has admin privileges on …
Advisory
VDE-2023-037
21.11.2023 08:00
Affected products are vulnerable to remote code execution via command injection in the web-based management by an attacker.
Advisory
VDE-2023-045
05.12.2023 08:00
An attacker with privileges can enumerate projects and usernames through an iterative process, by making a request to a specific endpoint.