Filtered by vendor Endress\+hauser Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-6463 2 Codewrights, Endress\+hauser 2 Hart Comm Dtm, Hart Comm Dtm 2024-11-21 N/A
CodeWrights HART Comm DTM components, as used with Endress+Hauser FieldCare, allow remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via a longtag XML schema containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2024-6596 2 Endress, Endress\+hauser 17 Echo Curve Viewer, Field Xpert Smt50, Field Xpert Smt50 Firmware and 14 more 2024-10-01 9.8 Critical
An unauthenticated remote attacker can run malicious c# code included in curve files and execute commands in the users context.