https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:57:38 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-00881 bdu:2023-00881 https://cve.radiocsirt.org/vuln/bdu:2023-00881 https://cve.radiocsirt.org/vuln/euvd-2026-221450 EUVD-2026-221450 https://cve.radiocsirt.org/vuln/euvd-2026-221450 https://cve.radiocsirt.org/vuln/fkie_cve-2022-45138 <p>The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.</p> <p>The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-45138 https://cve.radiocsirt.org/vuln/ghsa-hq37-597p-8qrg <p>The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.</p> <p>The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the device.</p> https://cve.radiocsirt.org/vuln/ghsa-hq37-597p-8qrg https://cve.radiocsirt.org/vuln/gsd-2022-45138 gsd-2022-45138 https://cve.radiocsirt.org/vuln/gsd-2022-45138 https://cve.radiocsirt.org/vuln/vde-2022-060 <p>The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Additionally, the web-based management suffers a CORS misconfiguration and allows reflected XSS (Cross-Site Scripting) attacks.</p> <p>The Web-Based Management (WBM) of WAGOs programmable logic controller (PLC) is typically used for administration, commissioning and updates. The configuration backend can in some cases be used without authentication and to write data with root privileges. Additionally, the web-based management suffers a CORS misconfiguration and allows reflected XSS (Cross-Site Scripting) attacks.</p> https://cve.radiocsirt.org/vuln/vde-2022-060 https://cve.radiocsirt.org/vuln/vde-2024-054 <p>Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.</p> <p>Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.</p> https://cve.radiocsirt.org/vuln/vde-2024-054