Most recent entries from all

CVE-2023-3634 — Festo: MSE6-C2M/D2M/E2M Incomplete User Documentation of Remote Accessible Functions

Affected: Festo MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L4-AGD, Festo MSE6-C2M-5000-FB36-D-M-RG-BAR-M12L5-AGD, Festo MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L4-MQ1-AGD, Festo MSE6-C2M-5000-FB43-D-M-RG-BAR-M12L5-MQ1-AGD, Festo MSE6-C2M-5000-FB44-D-M-RG-BAR-AMI-AGD, Festo MSE6-C2M-5000-FB44-D-RG-BAR-AMI-AGD, Festo MSE6-D2M-5000-CBUS-S-RG-BAR-VCB-AGD, Festo MSE6-E2M-5000-FB13-AGD, Festo MSE6-E2M-5000-FB36-AGD, Festo MSE6-E2M-5000-FB37-AGD and 2 more

In products of the MSE6 product-family by Festo a remote authenticated, low privileged attacker could use functions of undocumented test mode which could lead to a complete loss of confidentiality, integrity and availability.

VDE-2023-031 — Trumpf: Multiple Products affected by WIBU Codemeter Vulnerability

The TRUMPF CAD/CAM software tools mentioned above use the vulnerable CodeMeter Runtime (up to version 7.60b) application from WIBU-SYSTEMS AG to manage licenses within the component TRUMPF License Expert. This CodeMeter application contains new vulnerabilities, which may enable an attacker to gain full access to the server or workstation on which the TRUMPF License Expert has been installed on. A new version of the TRUMPF License Expert which fixes this vulnerability is available.Machines with a running and correctly installed mGuard hardware firewall cannot be exploited by this vulnerability if used as intended (according to the manual).

Update A, 2023-11-13 Removed CVE-2023-4701 because it was revoked.