https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:53:17.792552+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-03215 bdu:2022-03215 2026-10-03T15:53:17.882009+00:00 bdu:2022-03215 https://cve.radiocsirt.org/vuln/certfr-2022-avi-435 certfr-2022-avi-435 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-03T15:53:17.882052+00:00 certfr-2022-avi-435 https://cve.radiocsirt.org/vuln/euvd-2026-33211 EUVD-2026-33211 2026-10-03T15:53:17.882071+00:00 EUVD-2026-33211 https://cve.radiocsirt.org/vuln/fkie_cve-2021-45117 fkie_cve-2021-45117 2026-10-03T15:53:17.882083+00:00

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/ghsa-v4v7-f2qj-8939 GHSA-v4v7-f2qj-8939 2026-10-03T15:53:17.882109+00:00

The OPC autogenerated ANSI C stack stubs (in the NodeSets) do not handle all error cases. This can lead to a NULL pointer dereference.

 https://cve.radiocsirt.org/vuln/gsd-2021-45117 gsd-2021-45117 2026-10-03T15:53:17.882123+00:00 gsd-2021-45117 https://cve.radiocsirt.org/vuln/icsa-22-132-08 ICSA-22-132-08 — Siemens Industrial Products with OPC UA 2026-10-03T15:53:17.882132+00:00

The OPC UA ANSIC Stack (also called Legacy C-Stack) was reported to crash when an unexpected OPC UA Response message status code was accessed via the synchronous Client API. The vulnerability was found in generated code of the OPC Foundation C-Stack. An unexpected status code in response message will dereference Null pointer leading to crash, ping of death (PoD). This affects a client, but it might also affect a server when it uses OpcUa_ClientApi_RegisterServer (e.g. register at LDS). A specially crafted UA server, or Man in the Middle attacker, can cause the OPC UA application to crash by sending uncertain status code in response message.

 https://cve.radiocsirt.org/vuln/vde-2022-003 VDE-2022-003 — BECKHOFF: Null Pointer Dereference vulnerability in products with OPC UA technology 2026-10-03T15:53:17.882151+00:00

By tricking clients of the mentioned products into contacting malicious OPC UA servers and thereby acting as OPC UA clients, a crash of the component can be provoked.

 https://cve.radiocsirt.org/vuln/vde-2022-010 VDE-2022-010 — PHOENIX CONTACT: Multiple Linux component vulnerabilities fixed in latest AXC F x152 LTS release 2026-10-03T15:53:17.882166+00:00

PLCnext Control AXC F x152 is certified according to IEC 62443-4-1 and IEC 62443-4-2. This certification requires that all third-party components used in the firmware are regularly checked for known vulnerabilities.

Firmware components in version 2021.06 had already been updated. For the 2022.0 LTS version more firmware components have been updated implicitly fixing the vulnerabilities listed. The vulnerabilities listed above have not been individually verified in terms of actual impact and/or limitations in combination with the affected products listed. The current LTS release 2022.0 LTS contains updates of integrated third-party libraries, SDKs and other third-party software to address these issues nevertheless.

UPDATE A (April 4th, 2022): Added RFC 4072 (Art. No. 1051328) and fixed affected version of AXC F 3152

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2603 WID-SEC-W-2023-2603 — Siemens SICAM: Mehrere Schwachstellen 2026-10-03T15:53:17.882200+00:00

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Siemens SICAM ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen, seine Privilegien zu erweitern und Daten zu manipulieren.