Most recent entries from csaf_ifmelectronicgmbh

VDE-2026-005 — ifm: Multiple Vulnerabilities in CR3171

Wed, 06 May 2026 08:00:00 +0000

The Firmware installed on the CR3171 is impacted by various CODESYS vulnerabilities.

VDE-2024-061 — ifm: Improper Access Control vulnerability

Mon, 30 Jun 2025 10:00:00 +0000

A vulnerability has been disclosed in PLC ifm AC4xxS that allows an attacker to trigger the safety state with the help of a specially crafted html request. This leads to a loss of availability.

VDE-2024-028 — ifm moneo password reset can be exploited

Mon, 06 May 2024 10:00:00 +0000

moneo \"Forgot Password\" function has a vulnerability which allows gaining privileged access.

VDE-2024-012 — ifm: Vulnerabilities in ifm AC14 firmware

Tue, 09 Jul 2024 07:00:00 +0000

In ifm Smart PLC firmware up to version 4.3.17 for Smart PLC controllers AC14xx and AC4xxS, an attacker can access the configuration by using the hardcoded credentials. The endpoint hosts a scripts capable of executing various commands.

VDE-2022-050 — IFM: weak password recovery vulnerability in moneo appliance

Mon, 12 Dec 2022 11:00:00 +0000

An unauthenticated remote attacker could reset the administrator's password with information from the default, self-signed certificate.