https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:11:44.953431+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0846 certfr-2024-avi-0846 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Elles permettent à un attaquant de provoquer… 2026-10-03T04:11:45.028522+00:00 certfr-2024-avi-0846 https://cve.radiocsirt.org/vuln/cnvd-2024-40034 cnvd-2024-40034 2026-10-03T04:11:45.028562+00:00 cnvd-2024-40034 https://cve.radiocsirt.org/vuln/euvd-2026-255502 EUVD-2026-255502 2026-10-03T04:11:45.028578+00:00 EUVD-2026-255502 https://cve.radiocsirt.org/vuln/fkie_cve-2024-46887 fkie_cve-2024-46887 2026-10-03T04:11:45.028590+00:00

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

 https://cve.radiocsirt.org/vuln/ghsa-5qpf-cx59-xvm8 GHSA-5qpf-cx59-xvm8 2026-10-03T04:11:45.028619+00:00

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

 https://cve.radiocsirt.org/vuln/icsa-24-284-10 ICSA-24-284-10 — Siemens SIMATIC S7-1500 CPUs 2026-10-03T04:11:45.028636+00:00

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

 https://cve.radiocsirt.org/vuln/ssa-054046 SSA-054046 — SSA-054046: Unauthenticated Information Disclosure in Web Server of SIMATIC S7-1500 CPUs 2026-10-03T04:11:45.028655+00:00

The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum communication load.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3100 WID-SEC-W-2024-3100 — Siemens SIMATIC S7: Mehrere Schwachstellen 2026-10-03T04:11:45.028672+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Siemens SIMATIC S7 ausnutzen, um falsche Informationen darzustellen und vertrauliche Informationen offenzulegen.