https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T00:16:42.131088+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-2302 CVE-2022-2302 — LENZE: Missing password verification in authorisation procedure 2026-10-06T00:16:42.154698+00:00

Affected: LENZE cabinet c520, LENZE cabinet c550, LENZE cabinet c750

Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.

 https://cve.radiocsirt.org/vuln/vde-2022-030 VDE-2022-030 — Lenze: Vulnerability in the OPC-UA authentification connection in the firmware 2026-10-06T00:16:42.154767+00:00

The machine controller of the cabinet series include an OPC-UA server which uses an user management to authenticate clients via anonymous or user/password authentication. If the user/password authentication is selected, password verification is skipped upon second login. As a result, cases occur in which users can establish communication without correct authentication. This vulnerability is not located in the OPC-UA protocol or server, but in the interface to the products firmware.

This Security Advisory is only relevant for the following use cases:

• the user management has been activated on the machine controller (is deactivated by default)

• the OPC-UA Server is used

• Data are transferred via a symbol configuration (is not available by default)