Most recent entries from csaf_endresshauserag

VDE-2026-065 — Endress+Hauser: iDTM Debug Interface Vulnerability in the FDI Package Library

Mon, 03 Aug 2026 07:00:00 +0000

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the application directory.

VDE-2026-045 — Endress+Hauser: Multiple products affected by SopasET interface vulnerability

Thu, 16 Jul 2026 10:00:00 +0000

A vulnerability was discovered in several Endress+Hauser products that can be accessed via ethernet.

VDE-2026-032 — Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW

Tue, 21 Apr 2026 07:00:00 +0000

The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.

VDE-2025-107 — Endress+Hauser: Multiple products affected by Qualcomm vulnerabilities

Fri, 05 Dec 2025 11:00:00 +0000

Multiple vulnerabilities in a Qualcomm component have been reported in a closed-source report. This component is an integral part of the radio chip found in several Endress+Hauser products.

VDE-2026-003 — Endress+Hauser: Multiple products prone to multiple vulnerabilities in e!Runtime and CODESYS V3 Runtime

Tue, 31 Mar 2026 08:00:00 +0000

Multiple Endress+Hauser devices are prone to vulnerabilities found in e!Runtime and the CODESYS V3 framework.

VDE-2026-002 — Endress+Hauser: buffer overflow in glibc ld.so leading to privilege escalation

Mon, 02 Mar 2026 07:00:00 +0000

A vulnerability has been identified in WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser.

VDE-2025-068 — Endress+Hauser: Proline 10 Maintenance credentials may be exposed under certain conditions

Tue, 02 Sep 2025 10:00:00 +0000

A privilege escalation vulnerability has been identified in Endress+Hauser's Proline 10 devices. This flaw allows an authenticated user with Operator-level access to elevate their privileges and gain Maintenance-level access, potentially enabling unauthorized configuration changes.

Endress+Hauser has released a security update addressing this issue.

VDE-2025-105 — Endress+Hauser: Multiple products affected by Wibu-Systems CodeMeter Vulnerability

Mon, 08 Dec 2025 09:00:00 +0000

A vulnerability in Wibu-Systems CodeMeter (up to version 7.60b) affects multiple Endress+Hauser products. This flaw can lead to a heap buffer overflow, which may allow remote code execution under certain conditions.

VDE-2024-054 — Endress+Hauser: Netilion Network Insights is affected by multiple vulnerabilities

Mon, 21 Oct 2024 08:00:00 +0000

Several vulnerabilities have been identified in the web-based management of WAGO devices utilized in Endress+Hauser IoT solutions. WAGO has provided fixes for these vulnerabilities, which have been integrated into the solutions by Endress+Hauser. Additionally, a guideline on secure operation of these solutions has been made available.

VDE-2021-044 — Endress+Hauser: Multiple products affected by log4net vulnerability

Thu, 20 Jan 2022 08:06:00 +0000

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.