https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T20:52:29.276704+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-06609 bdu:2025-06609 2026-10-04T20:52:29.285261+00:00 bdu:2025-06609 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0397 certfr-2025-avi-0397 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-04T20:52:29.285294+00:00 certfr-2025-avi-0397 https://cve.radiocsirt.org/vuln/euvd-2026-239146 EUVD-2026-239146 2026-10-04T20:52:29.285313+00:00 EUVD-2026-239146 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23815 fkie_cve-2024-23815 2026-10-04T20:52:29.285325+00:00

A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), Desigo CC (All versions if access from Installed Clients to Desigo CC server is only allowed within highly protected zones). The affected server application fails to authenticate specific client requests. Modification of the client binary could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database via the event port (default: 4998/tcp)

 https://cve.radiocsirt.org/vuln/ghsa-xgrg-cw4v-4h6g GHSA-xgrg-cw4v-4h6g 2026-10-04T20:52:29.285354+00:00

A vulnerability has been identified in Desigo CC (All versions if access from Installed Clients to Desigo CC server is allowed from networks outside of a highly protected zone), Desigo CC (All versions if access from Installed Clients to Desigo CC server is only allowed within highly protected zones). The affected server application fails to authenticate specific client requests. Modification of the client binary could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database via the event port (default: 4998/tcp)

 https://cve.radiocsirt.org/vuln/gsd-2024-23815 gsd-2024-23815 2026-10-04T20:52:29.285371+00:00 gsd-2024-23815 https://cve.radiocsirt.org/vuln/icsa-25-135-04 ICSA-25-135-04 — Siemens Desigo 2026-10-04T20:52:29.285382+00:00

The affected server application fails to authenticate specific client requests. Modification of the client binary could allow an unauthenticated remote attacker to execute arbitrary SQL queries on the server database via the event port (default: 4998/tcp) If access from Installed Clients to Desigo CC server is only allowed within highly protected zones: Exploitation of this issue requires an attacker to get access to an Installed Client application in the "highly protected zone" (i.e. a physically separated private network), and bypass the hardening measures as described by Desigo CC Cybersecurity Guideline.