VDE-2025-069
Juli 31, 2025, 12:00 nachm.
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system …
VDE-2025-065
Juli 31, 2025, 12:00 nachm.
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in mbNET devices, enabling the execution of arbitrary operating system commands and leading to full system …
VDE-2025-058
Juli 21, 2025, 12:00 nachm.
Multiple vulnerabilities in all mbNET.mini devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.
VDE-2025-059
Juli 21, 2025, 12:00 nachm.
Multiple vulnerabilities in all REX 100 devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.
VDE-2025-053
Juli 8, 2025, 12:00 nachm.
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2025.0.2
VDE-2025-014
Juli 8, 2025, 12:00 nachm.
Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered.
VDE-2025-019
Juli 22, 2025, 10:00 vorm.
Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered. **Update Version 1.1.0:** Updated the reporting credits for CVE-2025-25271.
VDE-2025-054
Juli 8, 2025, 12:00 nachm.
Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, …