Advisories

For CVSS 2.0, 3.0 and 3.2
VDE-2021-029
May 14, 2025, 2:28 PM
A device on the same network as the controller sending a special crafted JSON request to the /auth/access-token endpoint may cause the controller to restart (CWE-20). UPDATE A The CVSS …
VDE-2021-032
May 22, 2025, 3:03 PM
Third party Niche Ethernet stack has several vulnerabilities announced by the security researcher's community. Phoenix Contact Classic Line industrial controllers are developed and designed for the use in closed industrial …
VDE-2021-036
May 14, 2025, 2:28 PM
Please consult the CVE entries above for more details.
VDE-2021-034
July 30, 2021, 9:55 AM
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM …
VDE-2021-017
May 14, 2025, 2:28 PM
Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management. Update A, 2021-11-24 corrected fixed version in solution from 3.9R0.4 …
VDE-2021-031
May 14, 2025, 2:28 PM
Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution. Please consult the CVE entries for details.
VDE-2020-036
May 14, 2025, 3:00 PM
Multiple vulnerabilities in the WAGO I/O-Check Service were reported.
VDE-2021-025
May 14, 2025, 2:28 PM
A Denial of Service and a CA Check Problem have been identified in multiple openSSL 1.1.1 versions, which are utilized in the Phoenix Contact products listed above.