https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:11:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04578 bdu:2022-04578 https://cve.radiocsirt.org/vuln/bdu:2022-04578 https://cve.radiocsirt.org/vuln/euvd-2026-175143 EUVD-2026-175143 https://cve.radiocsirt.org/vuln/euvd-2026-175143 https://cve.radiocsirt.org/vuln/fkie_cve-2022-2302 <p>Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.</p> <p>Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-2302 https://cve.radiocsirt.org/vuln/ghsa-78pc-4xg6-x467 <p>Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.</p> <p>Multiple Lenze products of the cabinet series skip the password verification upon second login. After a user has been logged on to the device once, a remote attacker can get full access without knowledge of the password.</p> https://cve.radiocsirt.org/vuln/ghsa-78pc-4xg6-x467 https://cve.radiocsirt.org/vuln/gsd-2022-2302 gsd-2022-2302 https://cve.radiocsirt.org/vuln/gsd-2022-2302 https://cve.radiocsirt.org/vuln/vde-2022-030 <p>The machine controller of the cabinet series include an OPC-UA server which uses an user management to authenticate clients via anonymous or user/password authentication. If the user/password authentication is selected, password verification is skipped upon second login. As a result, cases occur in which users can establish communication without correct authentication. This vulnerability is not located in the OPC-UA protocol or server, but in the interface to the products firmware.</p> <p>This Security Advisory is only relevant for the following use cases:</p> <p>• the user management has been activated on the machine controller (is deactivated by default)</p> <p>• the OPC-UA Server is used</p> <p>• Data are transferred via a symbol configuration (is not available by default)</p> <p>The machine controller of the cabinet series include an OPC-UA server which uses an user management to authenticate clients via anonymous or user/password authentication. If the user/password authentication is selected, password verification is skipped upon second login. As a result, cases occur in which users can establish communication without correct authentication. This vulnerability is not located in the OPC-UA protocol or server, but in the interface to the products firmware.</p> <p>This Security Advisory is only relevant for the following use cases:</p> <p>• the user management has been activated on the machine controller (is deactivated by default)</p> <p>• the OPC-UA Server is used</p> <p>• Data are transferred via a symbol configuration (is not available by default)</p> https://cve.radiocsirt.org/vuln/vde-2022-030