https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:00:51.480825+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-245799 EUVD-2026-245799 2026-10-02T13:00:51.532644+00:00 EUVD-2026-245799 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41647 fkie_cve-2025-41647 2026-10-02T13:00:51.532680+00:00

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

 https://cve.radiocsirt.org/vuln/ghsa-q6j3-9p27-59xc GHSA-q6j3-9p27-59xc 2026-10-02T13:00:51.532713+00:00

A local, low-privileged attacker can learn the password of the connected controller in PLC Designer V4 due to an incorrect implementation that results in the password being displayed in plain text under special conditions.

 https://cve.radiocsirt.org/vuln/vde-2025-043 VDE-2025-043 — Lenze: PLC Designer V4 with insecure storage of sensitive information 2026-10-02T13:00:51.532729+00:00

A security vulnerability was discovered in the PLC Designer V4 in the version 4.0.0 where the programmer of a Controller can set a password for the connected device. Here it is possible in an interface of the PLC Designer V4 for the programmer to enter a password for the Device. There is a special constellation where the password entered appears in plain text. Only the display in the tool is affected and not the management of the password on the device. This vulnerability of PLC Designer V4 only occurs in combination with the devices c430 controller, c520 controller and c550 controller and not in combination with other devices, as this functionality is only used here. It is generally recommended that all users update to 4.0.1, but especially all users who operate PLC Designer V4 in combination with the controllers mentioned.