Most recent entries from csaf_endresshauserag

VDE-2026-065 — Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library

2026-08-03T07:00:00+00:00

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.

VDE-2026-045 — Endress+Hauser: Multiple products affected by SopasET interface vulnerability

2026-07-16T10:00:00+00:00

A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.

VDE-2026-032 — Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW

2026-04-21T07:00:00+00:00

The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.

VDE-2025-107 — Endress+Hauser: Multiple products affected by Qualcomm vulnerabilities

2026-04-02T10:00:00+00:00

Multiple vulnerabilities in a Qualcomm component have been reported in a closed-source report. This component is an integral part of the radio chip found in several Endress+Hauser products.

VDE-2026-003 — Endress+Hauser: Multiple products prone to multiple vulnerabilities in e!Runtime and CODESYS V3 Runtime

2026-04-01T11:00:00+00:00

Multiple Endress+Hauser devices are prone to vulnerabilities found in e!Runtime and the CODESYS V3 framework.

VDE-2026-002 — Endress+Hauser: buffer overflow in glibc ld.so leading to privilege escalation

2026-03-02T07:00:00+00:00

A vulnerability has been identified in WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser.

VDE-2025-068 — Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions

2026-02-20T09:00:00+00:00

A privilege escalation vulnerability has been identified in Endress+Hauser's Proline 10 devices. This flaw allows an authenticated user with Operator-level access to elevate their privileges and gain Maintenance-level access, potentially enabling unauthorized configuration changes.

Endress+Hauser has released a security update addressing this issue.

VDE-2025-105 — Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability

2025-12-08T09:00:00+00:00

A vulnerability in Wibu-Systems CodeMeter (up to version 7.60b) affects multiple Endress+Hauser products. This flaw can lead to a heap buffer overflow, which may allow remote code execution under certain conditions.

VDE-2024-054 — Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities

2025-05-22T13:03:10+00:00

Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.

VDE-2021-044 — Endress+Hauser: Multiple products affected by log4net vulnerability

2025-05-14T13:00:14+00:00

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.