Search vulnerabilities

Expected end of text, found '/' (at char 27), (line:1, col:28)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,979

CVE-2021-34589

Bender Charge Controller: RFID leak

In Bender/ebee Charge Controllers in multiple versions are prone to an RFID leak. The RFID of the last charge event can be read without authentication via the web interface.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 6 more
CVE-2021-34588

Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot .

CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Bender
Products
Cc612 Cc612 Firmware Cc613 and 1 more
CVE-2021-34587

Bender Charge Controller: Long URL could lead to webserver crash

In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bender Ibm
Products
Cc612 Cc612 Firmware Cc613 and 6 more
CVE-2021-34582

Phoenix Contact: FL MGUARD XSS through web-based management and REST API

In Phoenix Contact FL MGUARD 1102 and 1105 in Versions 1.4.0, 1.4.1 and 1.5.0 a user with high privileges can inject HTML code (XSS) through web-based management or the REST API with a manipulated certificate file.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Fl Mguard 1102 Fl Mguard 1102 Firmware Fl Mguard 1105 and 1 more
CVE-2021-34581

WAGO: Denial of Service vulnerability inside the OpenSSL implementation

Missing Release of Resource after Effective Lifetime vulnerability in OpenSSL implementation of WAGO 750-831/xxx-xxx, 750-880/xxx-xxx, 750-881, 750-889 in versions FW4 up to FW15 allows an unauthenticated attacker to cause DoS on the device.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Wago
Products
750-831 750-831\/000-002 750-831\/000-002 Firmware and 15 more
CVE-2021-34580

Remote user enumeration in mymbCONNECT24, mbCONNECT24 <= 2.9.0

In mymbCONNECT24, mbCONNECT24 <= 2.9.0 an unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Mbconnectline
Products
Mbconnect24 Mymbconnect24
CVE-2021-34578

WAGO: Authentication Vulnerability in Web-Based Management

This vulnerability allows an attacker who has access to the WBM to read and write settings-parameters of the device by sending specifically constructed requests without authentication on multiple WAGO PLCs in firmware versions up to FW07.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Wago
Products
750-362 750-362 Firmware 750-363 and 21 more
CVE-2021-34576

Observable discrepancy in Kaden PICOFLUX AiR leaks water consumption

In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Kadenvodomery
Products
Picoflux Air Picoflux Air Firmware
CVE-2021-34575

Information Exposure in mymbCONNECT24, mbCONNECT24 <= 2.8.0

In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Mbconnectline
Products
Mbconnect24 Mymbconnect24
CVE-2021-34574

Password policy evasion in products of MB connect line and Helmholz

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Helmholz Mbconnectline
Products
Myrex24 Myrex24.virtual Mbconnect24 and 1 more
CVE-2021-34573

Incorrect calculation in Enbra EWM does not report backflows or no flow events

In Enbra EWM in Version 1.7.29 together with several tested wireless M-Bus Sensors the events backflow and "no flow" are not reconized or misinterpreted. This may lead to wrong values and missing events.

CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm
CVE-2021-34572

Insufficient Verification of Data Authenticity in Enbra EWM (replay attack)

Enbra EWM 1.7.29 does not check for or detect replay attacks sent by wireless M-Bus Security mode 5 devices. Instead timestamps of the sensor are replaced by the time of the readout even if the data is a replay of earlier data.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm
CVE-2021-34571

Hard-coded Credentials in Enbra Wireless M-Bus devices

Multiple Wireless M-Bus devices by Enbra use Hard-coded Credentials in Security mode 5 without an option to change the encryption key. An adversary can learn all information that is available in Enbra EWM.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Enbra
Products
Ewm
CVE-2021-34570

Phoenix Contact: DoS for PLCnext Control devices in versions prior to 2021.0.5 LTS

Multiple Phoenix Contact PLCnext control devices in versions prior to 2021.0.5 LTS are prone to a DoS attack through special crafted JSON requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Phoenixcontact
Products
Axc F 1152 Axc F 1152 Firmware Axc F 2152 and 9 more
CVE-2021-34564

In WirelessHART-Gateway versions 3.0.9 a vulnerability allows to read and write sensitive data in a cookie

Any cookie-stealing vulnerabilities within the application or browser would enable an attacker to steal the user's credentials to the PEPPERL+FUCHS WirelessHART-Gateway 3.0.9.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pepperl-fuchs
Products
Wha-gw-f2d2-0-as- Z2-eth.eip Wha-gw-f2d2-0-as- Z2-eth.eip Firmware Wha-gw-f2d2-0-as-z2-eth and 1 more
CVE-2021-34563

In WirelessHART-Gateway versions 3.0.8 and 3.0.9 the HttpOnly flag is missing in a cookie which allows client-side javascript to modify it

In PEPPERL+FUCHS WirelessHART-Gateway 3.0.8 and 3.0.9 the HttpOnly attribute is not set on a cookie. This allows the cookie's value to be read or set by client-side JavaScript.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Pepperl-fuchs
Products
Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more
CVE-2021-34561

A vulnerability in WirelessHART-Gateway <= 3.0.8 allows to bypass any IP or firewall based access restrictions through DNS rebinding

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.8 serious issue exists, if the application is not externally accessible or uses IP-based access restrictions. Attackers can use DNS Rebinding to bypass any IP or firewall based access restrictions that may be in place, by proxying through their target's browser.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Pepperl-fuchs
Products
Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more
CVE-2021-34560

A vulnerability in WirelessHART-Gateway <= 3.0.9 could lead to information exposure of sensitive information

In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.9 a form contains a password field with autocomplete enabled. The stored credentials can be captured by an attacker who gains control over the user's computer. Therefore the user must have logged in at least once.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Pepperl-fuchs
Products
Wha-gw-f2d2-0-as-z2-eth Wha-gw-f2d2-0-as-z2-eth.eip Wha-gw-f2d2-0-as-z2-eth.eip Firmware and 1 more