Most recent entries from csaf_aumariestergmbhcokg

VDE-2025-047 — AUMA: Incorrect delivery status of the Bluetooth configuration

Tue, 10 Jun 2025 10:00:00 +0000

For actuators with AC.2 controls and PROFOX actuators, a wrong configuration occurred for deliveries within the period from 01.01.2024 to 09.05.2025. Despite the ordered option "L90.00 = Bluetooth always deactivated", these actuators were delivered with an activated Bluetooth module which would allow an attacker to utilize the Bluetooth interface. It is possible to deactivate the Bluetooth interface of the affected actuators after the delivery using the standard procedures listed in the manuals.

VDE-2023-028 — AUMA: SIMA Master Station affected by WRECK vulnerability

Mon, 07 Aug 2023 11:35:00 +0000

** UNSUPPORTED WHEN ASSIGNED ** A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

VDE-2022-024 — Auma: SIMA² Master Station Denial of Service Vulnerability on Automation Runtime Webserver

Wed, 15 Jun 2022 10:00:00 +0000

Buffer Overflow vulnerability in B&R Automation Runtime webserver allows an unauthenticated network-based attacker to stop the cyclic program on the device and cause a denial of service.

VDE-2025-026 — AUMA Riester: Buffer overflow in service telegram

Mon, 12 May 2025 10:00:00 +0000

Sending too much data in the service telegram of AUMA actuators leads to a buffer overflow in the actuator controls. Depending on the actuator, the service telegram is transmitted either via Bluetooth or RS232

VDE-2023-027 — AUMA: Reflected Cross-Site Scripting Vulnerability in SIMA Master Stations

Mon, 07 Aug 2023 09:35:00 +0000

A reflected cross-site scripting vulnerability exists in the System Diagnostics Manager (SDM) component of SIMA² Master Stations.

VDE-2022-032 — AUMA: Multiple Vulnerabilities in Automation Runtime NTP Service

Tue, 09 Aug 2022 08:00:00 +0000

The SIMA2 Master Station features an NTP service based on ntpd, a reference implementation of the Network Time Protocol (NTP). Affected SIMA2 Master Stations with software version < V2.6 include an outdated version of ntpd which is affected by a large number of vulnerabilities