Most recent entries from csaf_frauschersensortechnikgmbh

VDE-2026-078 — Frauscher: FDS102 for FAdC/FAdCi R2 has multiple vulnerabilities

2026-08-20T10:00:00+00:00

Frauscher Sensortechnik FDS102 for FAdC/FAdCi R2 is vulnerable to Unrestricted Upload of File with Dangerous Type, Path Traversal: '../filedir', Insertion of Sensitive Information into Log File, Incorrect Authorization, Insufficient Session Expiration, Cross-Site Request Forgery (CSRF), Missing Authentication for Critical Function, and Missing Authorization.

VDE-2025-030 — Frauscher: FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi are Vulnerable to OS Command Injection Vulnerability

2025-07-29T10:00:00+00:00

Frauscher Sensortechnik FDS101, FDS-SNMP101 and FDS102 for FAdC/FAdCi R2 and all previous versions are vulnerable to OS Command Injection via malicious configuration file.

CVE-2025-3626 affects FDS102 versions v2.8.0 < v2.13.3.

CVE-2025-3705 affects a broader range of products and versions. Specifically, it affects: * FDS102 versions < v2.13.3 * FDS101 versions <= v1.4.25 * FDS-SNMP101 versions <= v.2.3.9

**Update 1.1.0, 29.07.2025:** The summary has been updated to include a mapping between CVEs and affected products, and the remediation section has been revised to include FDS101.

VDE-2023-049 — Frauscher: FDS102 for FAdC/FAdCi remote code execution vulnerability

2023-12-11T07:00:00+00:00

Frauscher Sensortechnik GmbH FDS102 for FAdC/FAdCi v2.10.1 is vulnerable to a remote code execution (RCE) vulnerability via manipulated parameters of the web interface by using an authenticated session cookie.

VDE-2023-038 — Frauscher: Multiple Vulnerabilities in FDS101

2023-09-21T06:00:00+00:00

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are prone to multiple vulnerabilities which could lead up to a full compromise of the FDS101 device.

VDE-2023-011 — Frauscher: Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability

2023-07-05T08:00:00+00:00

Frauscher Diagnostic System FDS001 for FAdC R1 and FAdCi R1 v1.3.3 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication.