VDE-2019-015
Juli 11, 2025, 9:00 vorm.
Phoenix Contact Classic Line industrial controllers (ILC1x0 and ILC1x1 product families as well as the AXIOLINE controllers AXC1050 and AXC3050) are developed and designed for the use in closed industrial …
VDE-2022-027
Juli 10, 2025, 12:00 nachm.
The Festo controller CECC product family in firmware version 2.4.2.0 is affected by multiple vulnerabilities in the CODESYS V3 runtime.
VDE-2025-053
Juli 8, 2025, 12:00 nachm.
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2025.0.2
VDE-2025-054
Juli 8, 2025, 12:00 nachm.
Multiple vulnerabilities in the PLCnext system allowed low-privileged remote attackers to gain unauthorized access or trigger system reboots by manipulating configuration files and symbolic links. Affected services include watchdog, arp-preinit, …
VDE-2025-014
Juli 8, 2025, 12:00 nachm.
Multiple vulnerabilities in the firmware of CHARX SEC-3xxx charging controllers have been discovered.
VDE-2025-057
Juli 7, 2025, 8:15 vorm.
During installation, identical certificates are installed across all systems instead of unique ones, which are intended for JWT Token encryption and signing.
VDE-2025-018
Juli 4, 2025, 12:00 nachm.
Vulnerabilities have been discovered in the WAGO Device Manager that allow any origin to access the server and set header values, as well as an endpoint that permits read access …
VDE-2025-045
Juli 1, 2025, 12:00 nachm.
Authentication is not configured by default for the Node-RED server on the Pilz industrial PC IndustrialPI. An unauthenticated remote attacker has full access to the Node-RED server and can run …