VDE-2022-052
Nov. 21, 2022, 10:00 vorm.
Up until October 5th, 2022 the ease2pay API used by Miele's "AppWash" MobileApp was vulnerable to an authorization bypass. A low privileged, remote attacker would have been able to gain …
VDE-2022-051
Mai 22, 2025, 3:03 nachm.
A denial of service of the HTTPS management interface of PHOENIX CONTACT FL MGUARD and TC MGUARD devices can be triggered by a larger number of unauthenticated HTTPS connections originating …
VDE-2022-048
Mai 14, 2025, 3:00 nachm.
Manipulated PC Worx or Config+ files could lead to a heap buffer overflow, release of unallocated memory or a read access violation due to insufficient validation of input data.The attacker …
VDE-2022-046
Mai 22, 2025, 3:03 nachm.
UPDATE A: Two devices (ENERGY AXC PU, SMARTRTU AXC SG) added (24.11.2022) Update for PLCnext Firmware containing fixes for recent vulnerability findings in Linux components and security enhancements. PLCnext Control …
VDE-2022-043
Nov. 7, 2022, 1:14 nachm.
Multiple Wiesemann & Theis product families are affected by multiple vulnerabilities in the web interface.
VDE-2022-049
Mai 22, 2025, 3:03 nachm.
TruControl laser control software from versions 1.60.0 to 3.40.0 use a vulnerable X.Org server versions. The affected X.Org vulnerability is not validating the request length properly for the handler 'ProcXkbSetGeometry'. …
VDE-2022-023
Okt. 17, 2022, 12:00 nachm.
During the installation of specific TRUMPF Windows applications, privileged local users with default usernames and passwords are created. An adversary could use these users to access and compromise the affected …
VDE-2022-040
Sept. 22, 2023, 2:39 nachm.
UPDATE A: Solution has updated release datesUPDATE B: Solution has updated release datesThis Advisory is published with reference to: CODESYS Advisory 2022-11 (Security update for CODESYS Control V2) CODESYS Advisory …