https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:18:24 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-17488 cnvd-2020-17488 https://cve.radiocsirt.org/vuln/cnvd-2020-17488 https://cve.radiocsirt.org/vuln/euvd-2026-49961 EUVD-2026-49961 https://cve.radiocsirt.org/vuln/euvd-2026-49961 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5106 <p>A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.</p> <p>A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5106 https://cve.radiocsirt.org/vuln/ghsa-f98g-j2jx-44x5 <p>A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.</p> <p>A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between e!Cockpit and CoDeSyS Gateway can trivially recover the password of any user attempting to log in, in plain text.</p> https://cve.radiocsirt.org/vuln/ghsa-f98g-j2jx-44x5 https://cve.radiocsirt.org/vuln/gsd-2019-5106 gsd-2019-5106 https://cve.radiocsirt.org/vuln/gsd-2019-5106 https://cve.radiocsirt.org/vuln/vde-2020-004 <p>The communication between e!Cockpit and the programmable logic controller is not encrypted. The broken cryptographic algorithm allows an attacker to decode the password for the e!Cockpit communication and with this to manipulate the application.</p> <p>The password used by e!Cockpit for authentication against the PLC is encrypted with a hard-coded key. An attacker is able to decrypt the password by listening to the network traffic.</p> <p>The communication between e!Cockpit and the programmable logic controller is not encrypted. The broken cryptographic algorithm allows an attacker to decode the password for the e!Cockpit communication and with this to manipulate the application.</p> <p>The password used by e!Cockpit for authentication against the PLC is encrypted with a hard-coded key. An attacker is able to decrypt the password by listening to the network traffic.</p> https://cve.radiocsirt.org/vuln/vde-2020-004