https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:58:18 +0000 https://cve.radiocsirt.org/vuln/bsi-2026-0001 <p>The ethernet and USB connections are not properly isolated allowing an attacker to configure and reset the device if configuration via ethernet is enabled and there is at least one legitimately authenticated connection active at the time of the attack. Resetting the device passwords using an invalid reset file causes a full device reset if the device is connected via USB. The function to switch between multiple configuration presets via HTTP does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via Modbus (TCP) does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via Modbus (RS485) does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via CAN does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset. Devices are shipped without a password by default and setting a password is not enforced.</p> <p>The ethernet and USB connections are not properly isolated allowing an attacker to configure and reset the device if configuration via ethernet is enabled and there is at least one legitimately authenticated connection active at the time of the attack. Resetting the device passwords using an invalid reset file causes a full device reset if the device is connected via USB. The function to switch between multiple configuration presets via HTTP does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via Modbus (TCP) does not require authentication. An attacker with access to the network could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via Modbus (RS485) does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset. The function to switch between multiple configuration presets via CAN does not require authentication. An attacker with access to the RS485 bus could use this functionality to disrupt normal operations if there is more than one configuration preset. Devices are shipped without a password by default and setting a password is not enforced.</p> https://cve.radiocsirt.org/vuln/bsi-2026-0001 https://cve.radiocsirt.org/vuln/euvd-2026-267066 EUVD-2026-267066 https://cve.radiocsirt.org/vuln/euvd-2026-267066 https://cve.radiocsirt.org/vuln/fkie_cve-2022-50978 <p>An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).</p> <p>An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-50978 https://cve.radiocsirt.org/vuln/ghsa-vcc2-8qcw-j2m8 <p>An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).</p> <p>An unauthenticated remote attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus (TCP).</p> https://cve.radiocsirt.org/vuln/ghsa-vcc2-8qcw-j2m8