https://cve.radiocsirt.org/rss/recent/csaf_aumariestergmbhcokg/10 Most recent entries from csaf_aumariestergmbhcokg 2026-10-02T07:11:59.628499+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/vde-2025-047 VDE-2025-047 — AUMA: Incorrect delivery status of the Bluetooth configuration 2025-06-10T10:00:00+00:00

For actuators with AC.2 controls and PROFOX actuators, a wrong configuration occurred for deliveries within the period from 01.01.2024 to 09.05.2025. Despite the ordered option "L90.00 = Bluetooth always deactivated", these actuators were delivered with an activated Bluetooth module which would allow an attacker to utilize the Bluetooth interface. It is possible to deactivate the Bluetooth interface of the affected actuators after the delivery using the standard procedures listed in the manuals.

 2025-06-10T10:00:00+00:00 https://cve.radiocsirt.org/vuln/vde-2023-028 VDE-2023-028 — AUMA: SIMA Master Station affected by WRECK vulnerability 2025-05-14T13:00:15+00:00

** UNSUPPORTED WHEN ASSIGNED ** A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

 2023-08-07T11:35:00+00:00 https://cve.radiocsirt.org/vuln/vde-2022-024 VDE-2022-024 — Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver 2025-05-14T13:00:15+00:00

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.

 2022-06-15T10:00:00+00:00 https://cve.radiocsirt.org/vuln/vde-2025-026 VDE-2025-026 — AUMA Riester: Buffer overflow in service telegram 2025-05-14T13:00:14+00:00

Sending too much data in the service telegram of AUMA actuators leads to a buffer overflow in the actuator controls. Depending on the actuator, the service telegram is transmitted either via Bluetooth or RS232

 2025-05-12T10:00:00+00:00 https://cve.radiocsirt.org/vuln/vde-2023-027 VDE-2023-027 — AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations 2023-08-07T09:35:00+00:00

A reflected cross-site scripting vulnerability exists in the System Diagnostics Manager (SDM) component of SIMA² Master Stations.

 2023-08-07T09:35:00+00:00 https://cve.radiocsirt.org/vuln/vde-2022-032 VDE-2022-032 — AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service 2022-08-09T08:00:00+00:00

The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include an outdated version of ntpd which is affected by a large number of vulnerabilities

 2022-08-09T08:00:00+00:00